Web Access Management Engineer - RDT Identity & Access Management

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.The PositionAs a Web Access Management Engineer specializing in Authentication, you will be a core member of our Identity and Access Management product team, responsible for designing, building, and maintaining secure and seamless authentication experiences for our enterprise on-prem and SaaS platforms. You will play a crucial role in integrating and implementing various authentication and authorization protocols, ensuring our applications are protected against evolving cyber threats while delivering a frictionless user experience.The OpportunityResponsibilitiesAuthentication & Authorization ImplementationDesign, test, and deploy reusable authentication and authorization components across the enterprise while adhering to security best practices and architectural guidelinesImplement enterprise IAM solutions and integrate with identity providers (IdPs) using protocols like SAML, OAuth, and OpenID Connect (OIDC) to support Single Sign-On (SSO)Implement and manage secure MFA mechanisms, including exploring and deploying passwordless authentication solutions to enhance user securityDevelop hands-on experience with token-based authentication (JWT), session management, and secure communication via RESTful APIs and Security & Backend IntegrationCollaborate with backend developers to define and implement robust API security measures, including token validation and authorization mechanismsEnsure secure integration across authentication flows and establish security standards for token handling and authorization frameworksProduction Support & Incident ManagementApply ITIL principles to troubleshoot authentication issues in production environments and participate in change management processesWork with security teams to mitigate authentication vulnerabilities and perform root-cause analysis on authentication-related incidentsInvestigate security incidents and perform vulnerability assessments on authentication systemsContinuous Learning & EvolutionStay updated on cutting-edge authentication technologies, security threats, and industry best practices to continuously improve security systemsDemonstrate a mindset of continuous improvement with a proactive approach to identifying solution-level issues, gaps, or inefficienciesContribute to minor process improvements within your immediate scope and identify opportunities for technical refinementStakeholder Collaboration & CommunicationWork closely with product managers, security engineers, and developers to create secure and user-friendly authentication flows that meet business and technical requirementsIdentify key business, technical, and security stakeholders for assigned tasks, analyzing their needs and interests regarding security posture and riskDevelop and deliver tailored communication for security tasks and incident updatesFacilitate meetings and proactively engage with stakeholders to elicit, clarify, and validate security requirementsFeature Development & ReliabilityDevelop and maintain reliable and scalable authentication and authorization features to ensure the adoption of security best practices across the organizationContribute to projects by providing well-analyzed requirements and supporting the design of solutions that align with business objectivesTranslate requirements into strategic plans with appropriate oversight and demonstrate growing autonomy within your domainWho You AreExperience & Education3-5 years of experience as a Web Developer with a significant focus on authentication and authorization implementationsBachelor's Degree in Computer Science, Software Engineering, or a related discipline, or equivalent practical experienceExperience in conducting stakeholder interviews, synthesizing requirements, and mapping/analyzing current processesDemonstrated ability to independently handle less complex tasks and contribute to various stages of the security and business analysis lifecycleWorking knowledge of relevant business domains and supporting cybersecurity technologiesTechnical ExpertiseStrong proficiency in web development frameworks and languages (React, Angular, Vue.js, Node.js, Python, Java, C#)Demonstrable experience working with Identity and Access Management (IAM) solutions such as Okta, Entra ID (Azure AD), Ping Identity, Auth0, or similarPractical experience with SAML, OAuth 2.0, and OpenID Connect (OIDC) protocolsExperience implementing and integrating various MFA methods (TOTP, FIDO2/WebAuthn, biometric authentication, YubiKey)Familiarity with secure coding practices and common web application vulnerabilities (OWASP Top 10)Skilled in modern web development frameworks and programming languages (JavaScript/TypeScript, Python, Java, Go, C#)Experience with version control systems (Git), CI/CD pipelines for secure code deploymentOptional scripting expertise with Python, Bash, or PowerShellUnderstanding of Zero Trust principles, authentication factors (FIDO2/WebAuthn, biometrics, magic links)Knowledge of user provisioning methods (JIT) and directory services (LDAP, Active Directory)Strong debugging and problem-solving skills, particularly with complex authentication flowsProfessional QualitiesStrong communication skills to convey technical concepts to diverse audiencesDemonstrated success working collaboratively in Agile environments and contributing to cross-functional teamsStrong analytical and logical reasoning skills to identify discrepancies, challenge assumptions, and confidently present solutionsAbility to navigate moderate levels of complexity in requirements and stakeholder landscapesGrowing understanding of sources of influence and ability to analyze business problems/opportunities within your product contextCapability to break down complex technical concepts with minimal guidanceProactive mindset with a focus on identifying and addressing inefficiencies and gapsIf you are a talented web developer with a passion for building secure, user-centric authentication solutions, we'd like to hear from you. This is an excellent opportunity to grow your expertise in identity and access management while working on enterprise-scale platforms that impact global security operations.Relocation benefits are not available for this job posting.Who we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.Let’s build a healthier future, together.Roche is an Equal Opportunity Employer.SummaryLocation: San Jose, Costa RicaType: Full time