Rolex IAM Engineer (CIAM Specialist)
- Location
- GenevaGenevaSwitzerland
- Employment
- Full-Time
- Seniority
- Mid-Level
- Department
- IT & Technology Systems
- Industry
- Fine Watches & Horology
- Posted
- May 8, 2026
About Rolex
Rolex is a distinguished Swiss watchmaker renowned for precision engineering, rigorous quality standards and enduring craftsmanship. As an employer, Rolex emphasizes technical excellence, discretion and long-term professional development within a culture that balances tradition with selective technological innovation.
Rolex — Geneva: IAM Engineer (CIAM Specialist). Permanent role managing CIAM, IGA and IdP platforms; requires IAM experience and scripting skills.
Role & Responsibilities
- Design, deploy and maintain Customer Identity and Access Management (CIAM) solutions for external users (clients, partners).
- Own registration, authentication and account-recovery flows to ensure secure and seamless customer journeys.
- Implement and maintain MFA, consent management and data-protection controls to ensure CIAM compliance and security.
- Administer and optimise the Identity Governance & Administration (IGA) platform: lifecycle management, role modelling, provisioning and deprovisioning workflows.
- Automate provisioning/deprovisioning and identity lifecycle processes through scripting and orchestration.
- Operate and evolve corporate Identity Providers (IdPs) and configure authentication protocols such as SAML, OAuth and OIDC.
- Integrate internal applications and services securely with IdPs and CIAM/IGA platforms.
- Collaborate closely with product and marketing teams to improve user experience while ensuring security and regulatory compliance.
Qualifications
- Degree in computer science, cybersecurity or a related discipline.
- Minimum of 3 years' professional experience in IAM, with demonstrated exposure to CIAM, IGA and IdP technologies (CIAM specialization preferred).
- Proven experience administering IGA platforms and managing identity lifecycle processes.
- Strong knowledge of authentication protocols: SAML, OAuth, OIDC.
- Practical experience with IdP platforms such as Okta, Ping Identity, Azure AD or Keycloak.
- Familiarity with IGA solutions (e.g., SailPoint, Saviynt, Usercube) and role-based access models.
- Scripting and automation skills: Python, PowerShell, Bash.
- Knowledge of security and privacy frameworks and regulations (GDPR, NIST).
- Excellent communication skills for explaining technical concepts to non-experts and ability to work cross-functionally.
- Availability for on-call rotations and incident response outside standard business hours.
Skills
Experience
Minimum three years of hands-on experience in Identity & Access Management, with concrete exposure to CIAM implementations, IGA administration and operation of Identity Providers. Experience automating provisioning workflows and integrating authentication protocols in enterprise environments is required.
Education
Degree in computer science, cybersecurity or a related field.
Workplace
This position is based in Geneva, Geneva, Switzerland.
Culture
Rolex fosters a highly professional, precision-driven workplace where craftsmanship and technical rigor are paramount. The environment values discretion, long-term development and close collaboration between engineering, product and operational teams.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Rolex, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Identity and Access Management Engineer», «CIAM Engineer», «Identity Engineer», «Access Management Specialist», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.