IAM Tech Lead (IGA) Job Opportunity at the International Committee of the Red Cross (ICRC)
Purpose of the Role
The IAM Tech Lead (IGA) is responsible for the technical design, implementation, and evolution of identity lifecycle processes, including Joiner-Mover-Leaver (JML), as well as supporting core authentication services, federation platforms, and user management functions.
A significant part of the role involves leading the technical transition and migration from Microsoft Identity Manager (MIM) to a modern enterprise IGA platform (e.g., Microsoft Entra ID Governance, SailPoint, or equivalent). Equally critical is maintaining and stabilizing the MIM platform and its integrations.
Within the IAM product team, the IAM Tech Lead (IGA) ensures the technical consistency, security, and long-term roadmap of our IGA infrastructure. The role includes mentoring team members and maintaining close collaboration with adjacent product and operational teams.
Main Duties & Responsibilities
- Maintain and enhance the existing Microsoft Identity Manager (MIM) infrastructure to ensure operational stability until its planned retirement.
- Drive the technical strategy and execution for migrating identity lifecycle and governance workflows from MIM to a modern IGA platform (such as MS Entra ID Governance, SailPoint, or One Identity).
- Design, implement, and continuously improve Joiner-Mover-Leaver (JML) workflows and identity lifecycle processes.
- Define and enforce identity governance controls, entitlement reviews, and segregation of duties aligned with enterprise security and compliance standards.
- Architect and implement integrations between IAM platforms and target systems, including HRIS, directories, cloud applications, and on-premises infrastructure.
- Collaborate with business and technical stakeholders to onboard applications and services to the IGA platform.
- Lead the migration from Active Directory Federation Services (ADFS) to Entra ID and establish standards for application authentication and access management.
- Maintain and leverage Microsoft Entra ID capabilities for identity lifecycle and governance functions.
- Define scalable architectural patterns, promote identity governance best practices, and transfer knowledge to operations and support teams.
- Maintain operational documentation, adapt processes to evolving requirements, and ensure smooth transition of new services into production.
- Ensure the high availability, security, and scalability of identity-related services.
Professional & Education Background
- Degree in Information Technology, Computer Science, or equivalent experience.
- Minimum 5 years of hands-on experience in technical implementation and engineering within the IAM domain.
- Experience with modern enterprise IGA platforms such as Entra ID Governance, SailPoint, One Identity, Omada, or equivalent.
- Experience leading or architecting complex Joiner–Mover–Leaver (JML) lifecycle processes in enterprise environments.
- Strong hands-on experience with Microsoft Identity Manager (MIM): management agents, synchronization rules, policies, and custom workflows.
- Experience integrating HRIS source systems (e.g., Workday, SAP SuccessFactors) into IGA platforms.
- Solid understanding of identity federation and authentication protocols (OAuth 2.0, OpenID Connect, SAML, Kerberos).
- Experience with Microsoft Entra ID administration and hybrid identity management.
Desired Profile & Skills
- Automation experience using scripting and IaC tools (PowerShell, Microsoft Graph API, Terraform, Ansible).
- Familiarity with Zero Trust architecture principles and cloud-first IAM strategies.
- Strong analytical and problem-solving skills, with the ability to think at an architectural level.
- Clear communicator, able to translate complex technical concepts for non-technical stakeholders and cross-functional teams.
- Comfortable prioritising and delivering in an agile, product-oriented team environment.
- Languages: Fluent English (written and spoken); working knowledge of French is a plus.
Additional Information
- Type of Contract: Open-ended
- Length of assignment: Long term assignment
- Activity rate: 100%
- Start Date: November 2026
- Location: Geneva
- Recruiter: Alejandra Rodriguez
- Application deadline: 20 August 2026
Visit the official website to apply
Follow Youth Opportunities Hub on LinkedIn
Looking for another opportunity?
Search Youth Opportunities Hub for jobs, bursaries, internships, learnerships, scholarships and more.
