Swatch Group ICT Operations Engineer (Identity)

Swatch Group Services Ltd. provides centralized IT support for the Swatch Group’s portfolio of watch brands from its Swiss hubs. The IT Competence Center delivers global infrastructure and application services across multiple brands, combining watchmaking heritage with modern technology to support international operations and innovation.

1. Operate, monitor and maintain enterprise identity platforms and services (on-premises and cloud).
2. Manage user lifecycle processes: provisioning, deprovisioning, role assignments and entitlement reviews across connected systems.
3. Implement and support single sign‑on (SSO), federation and authentication flows (SAML, OAuth2, OpenID Connect).
4. Troubleshoot identity and access incidents, perform root‑cause analysis and coordinate remediation across engineering and security teams.
5. Develop and maintain automation and operational runbooks using scripting and tooling to reduce manual work and increase reliability.
6. Collaborate on global projects to design and deploy identity solutions, integrations and migrations (e.g., AD to Azure AD scenarios).
7. Ensure compliance with access governance, audit requirements and internal security policies; participate in access review campaigns.
8. Produce technical documentation, knowledge transfers and operational metrics for stakeholders and support teams.

1. Proven hands‑on experience operating enterprise identity solutions and directory services.
2. Strong knowledge of authentication and federation protocols (SAML, OAuth2, OpenID Connect) and identity lifecycle concepts.
3. Demonstrable experience with Active Directory and Azure AD / Microsoft Entra ID.
4. Proficiency in scripting for automation (PowerShell and/or Bash) and experience with identity provisioning tooling.
5. Ability to diagnose complex production incidents and work across international teams to resolution.
6. Professional communication skills in English; additional German or French is advantageous.

1. Active Directory
2. Azure AD
3. Microsoft Entra ID
4. SAML
5. OAuth2
6. OpenID Connect
7. LDAP
8. PowerShell
9. Bash
10. Okta
11. PingFederate
12. Identity and Access Management (IAM)

Minimum of 3 years’ professional experience in identity operations, directory services or IAM within an enterprise environment, including production support and project delivery for global systems.

Bachelor’s degree in Computer Science, Information Technology, Engineering or equivalent practical experience.

Swatch Group combines a tradition of Swiss watchmaking with a progressive, technology‑driven culture. Teams are international and collaborative, with an emphasis on pragmatic engineering, continuous learning and cross‑brand cooperation within a structured global IT organization.