IAM Tech Lead (IGA), Geneve

About the ICRC

Since 1863, the International Committee of the Red Cross (ICRC) has worked to relieve suffering and preserve human dignity during war and armed violence. Alongside our Red Cross and Red Crescent partners, we deliver life-saving aid across front lines and strive to reconnect families and locate missing people.

Engaging with authorities and armed forces on all sides, often confidentially, we advocate for humane treatment of detainees and urge compliance with international humanitarian law to protect civilians from harm, including online.

Purpose of the Role

The IAM Tech Lead (IGA) is responsible for the technical design, implementation, and evolution of identity lifecycle processes, including Joiner-Mover-Leaver (JML), as well as supporting core authentication services, federation platforms, and user management functions.

A significant part of the role involves leading the technical transition and migration from Microsoft Identity Manager (MIM) to a modern enterprise IGA platform (e.g., Microsoft Entra ID Governance, SailPoint, or equivalent). Equally critical is maintaining and stabilizing our MIM platform and its integrations.

Within the IAM product team, the IAM Tech Lead (IGA) ensures the technical consistency, security, and long-term roadmap of our IGA infrastructure. The role includes mentoring team members and maintaining close collaboration with adjacent product and operational teams.

Main Duties & Responsibilities

• Maintain and enhance the existing Microsoft Identity Manager (MIM) infrastructure to ensure operational stability until its planned retirement.
• Drive the technical strategy and execution for migrating identity lifecycle and governance workflows from MIM to a modern IGA platform (such as MS Entra ID Governance, SailPoint, or One Identity).
• Design, implement, and continuously improve Joiner-Mover-Leaver (JML) workflows and identity lifecycle processes.
• Define and enforce identity governance controls, entitlement reviews, and segregation of duties aligned with enterprise security and compliance standards.
• Architect and implement integrations between IAM platforms and target systems, including HRIS, directories, cloud applications, and on-premises infrastructure.
• Collaborate with business and technical stakeholders to onboard applications and services to the IGA platform.
• Lead the migration from Active Directory Federation Services (ADFS) to Entra ID and establish standards for application authentication and access management.
• Maintain and leverage Microsoft Entra ID capabilities for identity lifecycle and governance functions.
• Define scalable architectural patterns, promote identity governance best practices, and transfer knowledge to operations and support teams.
• Maintain operational documentation, adapt processes to evolving requirements, and ensure smooth transition of new services into production.
• Ensure the high availability, security, and scalability of identity-related services.

  Professional & Education Background

  • Degree in Information Technology, Computer Science, or equivalent experience.
  • Minimum 5 years of hands-on experience in technical implementation and engineering within the IAM domain.
  • Experience with modern enterprise IGA platforms such as Entra ID Governance, SailPoint, One Identity, Omada, or equivalent.
  • Experience leading or architecting complex Joiner–Mover–Leaver (JML) lifecycle processes in enterprise environments.
  • Strong hands-on experience with Microsoft Identity Manager (MIM): management agents, synchronization rules, policies, and custom workflows.
  • Experience integrating HRIS source systems (e.g., Workday, SAP SuccessFactors) into IGA platforms.
  • Solid understanding of identity federation and authentication protocols (OAuth 2.0, OpenID Connect, SAML, Kerberos).
  • Experience with Microsoft Entra ID administration and hybrid identity management.

    Desired Profile & Skills

    • Automation experience using scripting and IaC tools (PowerShell, Microsoft Graph API, Terraform, Ansible).
    • Familiarity with Zero Trust architecture principles and cloud-first IAM strategies.
    • Strong analytical and problem-solving skills, with the ability to think at an architectural level.
    • Clear communicator, able to translate complex technical concepts for non-technical stakeholders and cross-functional teams.
    • Comfortable prioritising and delivering in an agile, product-oriented team environment.
    • Languages: Fluent English (written and spoken); working knowledge of French is a plus.

      Additional Information

      • Type of Contract: Open-ended
      • Length of assignment: Long term assignment
      • Activity rate: 100%
      • Start Date: November 2026
      • Location: Geneva
      • Recruiter: Alejandra Rodriguez
      • Application deadline: 20 August 2026

        The ICRC values diversity and is committed to creating an inclusive working environment. We welcome applications from all qualified candidates.

        For more information about working at ICRC HQ please click here.

        Our Values

        At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviours based on these shared values. For more information on the ICRC values, please visit this page.

        Are you ready to explore the next chapter of your career? Apply now!