{"active":true,"apply_url":"https://jobs.lever.co/sonarsource/7b304f33-35f3-4734-9772-b4ceb447f8c0/apply","company":{"claimed":false,"name":"Sonar","slug":"sonarsource","website":"https://www.sonarsource.com"},"countries":["CH"],"employment_type":"full-time","first_seen_at":"2026-10-31T20:45:10Z","getwork_url":"https://getwork.dev/jobs/lv-sonarsource-7b304f33-35f3-4734-9772-b4ceb447f8c0/","id":"lv-sonarsource-7b304f33-35f3-4734-9772-b4ceb447f8c0","injection_flag":false,"last_seen_at":"2026-11-03T08:45:08Z","location":"Geneva","published_at":"2026-10-31T13:12:57Z","regions":["europe"],"remote":"onsite","role_family":"software","salary":null,"seniority":"unspecified","stack":["aws","gcp","azure"],"stack_mentioned":["go","javascript","python","java"],"title":"Identity & Access Management Engineer","untrusted_description":"Who is Sonar?\nSonar enables organizations to ship agentic code with confidence. Code creation is abundant, but confidence is scarce. Our core platform, SonarQube, verifies over 750 billion lines of code every day, delivering agentic verification and governance for all code. Trusted by more than 7 million developers and 75% of the Fortune 100, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company, Sonar enables organizations to reduce outages, improve security, and lower the cost and risk of agentic software development.\n\nFounded in Geneva and now headquartered in Austin, Texas, Sonar has a global team working across offices and hubs, including Silicon Valley, London, Bochum, Barcelona, Singapore, Tokyo, and the Washington, D.C. area. At Sonar, we’re enabling enterprises to build agentic software factories that can move quickly while maintaining the control, consistency and evidence required to ship with confidence.\n\nPosition description\nWe are looking for an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access. You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable, and user-friendly access experience aligned with Zero Trust principles.\n\nWhat you will do\n-\nDesign, implement, and maintain enterprise IAM solutions, including SSO, MFA, federation, and directory services.\n\n-\nArchitect and manage identity lifecycle processes (joiner/mover/leaver), automating provisioning and deprovisioning across SaaS, cloud, and on-prem systems.\n\n-\nImplement and operate Privileged Access Management (PAM), including vaulting, session management, and just-in-time access.\n\n-\nLead Identity Governance and Administration (IGA) initiatives such as access reviews, certifications, role-based access control (RBAC), and segregation-of-duties controls.\n\n-\nIntegrate applications with the identity platform using SAML, OIDC, OAuth 2.0, SCIM, and LDAP.\n\n-\nDevelop automation and tooling (APIs, scripts, CI/CD pipelines, Infrastructure as Code) to reduce manual identity operations.\n\n-\nSecure cloud identity and access across AWS, Azure, and/or GCP, including IAM policies, workload identity, and service accounts.\n\n-\nDefine and enforce authentication and authorization standards, policies, and best practices.\n\n-\nMonitor identity-related threats and support detection and response for account compromise, credential abuse, and privilege escalation.\n\nExperience and qualifications\n-\n6 to 15 years of experience in IAM, security engineering, or a related field.\n\n-\nHands-on experience with at least one major IAM platform such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk.\n\n-\nStrong knowledge of identity protocols and standards: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos.\n\n-\nExperience with Active Directory and directory services architecture.\n\n-\nProficiency in at least one scripting or programming language (Python, PowerShell, Go, Java, or JavaScript).\n\n-\nSolid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).\n\n-\nExperience with MFA, passwordless, and conditional or risk-based access.\n\n-\nFamiliarity with Zero Trust, least privilege, and defense-in-depth principles.\n\n-\nStrong analytical, problem-solving, and communication skills.\n\nAdditional comments\nThis role is based in Geneva. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate.\n\nWe value diversity, equity, and inclusion\nAt Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.\nIf you need any accommodation, please reach out to us at hiring@sonarsource.com.\nAll offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.\nApplications that are submitted through agencies or third party recruiters will not be considered.","url":"https://jobs.lever.co/sonarsource/7b304f33-35f3-4734-9772-b4ceb447f8c0"}