Senior Cybersecurity Analyst - Policy Based Access

About the role

Roche Digital Technology's Identity and Access Management (IAM) team protects the organization's global digital assets through identity governance, fine-grained authorization and hybrid cloud security. As a Senior Cybersecurity Analyst - Policy Based Access, you will join a global team that designs, implements and manages the Policy Based Access Control (PBAC) infrastructure, acting as a trusted advisor to global application owners and supporting Roche's Zero Trust strategy.

Key responsibilities

• Own core PBAC components (PDP/PEP) across a hybrid global landscape, ensuring high availability and performance
• Lead the enterprise transition from initial access use cases to global adoption, defining organization-wide standards for policy-based authorization
• Advise application and data owners on integration pathways using RESTful APIs, SQL/JDBC and LDAP
• Pioneer Policy as Code by designing automated pipelines for versioning, testing and deploying authorization logic
• Manage platform lifecycles, including upgrades, performance tuning and security patching
• Analyse moderately complex cybersecurity incidents, threats and vulnerabilities
• Accelerate onboarding of new digital assets in line with GDPR and other international data privacy regulations
• Work with product managers, developers and global stakeholders to build secure, friction-free PBAC workflows

Required profile

• 4-9 years of IT security experience, including 3+ years in IAM and PBAC/ABAC in large enterprises
• Bachelor's or advanced degree in Computer Science, Cyber Security, Information Technology or a related field (or equivalent experience)
• Advanced logical reasoning and ability to propose security controls
• Fluent English and experience in Agile matrixed global environments
• Ability to mentor colleagues and manage Managed Service Providers

Required skills

• XACML, decentralized policy management and Zero Trust frameworks (RBAC and ABAC)
• SAML, OAuth, OIDC, SSO and Identity Governance and Administration (IGA)
• Java or Python for custom integrations, Git and CI/CD pipelines