L

Lombard Odier

Private wealth management and fiduciary services

Identity & Access Management Administrator

Security Engineering & ArchitecturePosted on Nov 13
Full-timeLuxembourgNo salary listedIn-person

About the Job

Requirements

  • Strong experience in identity and access management.
  • Excellent knowledge of on-premises Active Directory and Entra ID / Azure AD.
  • Good understanding of role-based access control (RBAC), attribute-based access control (ABAC), single sign-on (SSO), Security Assertion Markup Language (SAML), OAuth 2.0, OpenID Connect (OIDC), provisioning, and System for Cross-domain Identity Management (SCIM).
  • Experience with an identity and access management (IAM) or identity governance and administration (IGA) tool such as SailPoint, One Identity, Saviynt, or ServiceNow IAM.
  • Experience or exposure to privileged access management (PAM) solutions.
  • Strong knowledge of Windows Server environments and access security.
  • Experience in a banking or regulated environment.
  • Knowledge of Zero Trust and identity security models.
  • Familiarity with ServiceNow and monitoring tools such as Splunk, Grafana, Elastic, and security information and event management (SIEM) tools.
  • Experience in application integration, including SSO and federation.
  • Understanding of cloud and hybrid identity challenges.
  • Fluent French and professional English are required.

Responsibilities

  • Process and analyze access requests via IT service management (ITSM) tools such as ServiceNow.
  • Ensure access provisioning and deprovisioning and resolve IAM incidents.
  • Manage identities, accounts, and groups in Active Directory and Entra ID (Azure AD).
  • Administer access rights for NTFS, file shares, and business applications.
  • Monitor Joiners / Movers / Leavers (JML) processes.
  • Contribute to IAM process automation through workflows, scripting, and APIs.
  • Support the improvement of access models, including RBAC and ABAC.
  • Integrate new applications into the IAM ecosystem, including SSO, provisioning, and federation.
  • Participate in the transition toward Zero Trust and identity-first architectures.
  • Manage and improve access assignment workflows (IGA).
  • Participate in access recertification campaigns.
  • Administer privileged access via a PAM solution such as CyberArk or BeyondTrust.
  • Contribute to the management of sensitive access and secrets using Vault.
  • Support compliance controls and audits, including FINMA and ISO.
  • Provide Level 2/3 support on IAM-related issues.
  • Collaborate with Security, Infrastructure, Application, and Risk teams.
  • Write and maintain technical procedures and IAM documentation.

Desired Qualifications

  • Knowledge of scripting, automation, or generative AI, including PowerShell, APIs, or Copilot, is highly valued.

About the Company

Lombard Odier

Private wealth management and fiduciary services

Lombard Odier is a private bank and wealth manager that serves private and institutional clients. It offers services such as discretionary and advisory portfolio management, wealth planning, and custody, delivering tailored investment solutions and financial planning. Clients access these products through a global network and a proprietary technology platform used by the bank to manage accounts and investments. The company differentiates itself through its independent, partner-owned structure, a long history spanning over two centuries, and a focus on long-term client interests, stability, and bespoke service. It also emphasizes sustainable investing, helping clients navigate the transition to a net-zero, nature-positive economy. The goal is to create sustainable value for clients by pairing high-quality investment options with steady guidance and a strong balance sheet.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Geneva, Switzerland
Founded
1796

Recently Posted Jobs

Explore more opportunities at Lombard Odier

See more jobs