Job Description

About the ICRC

Since 1863, the International Committee of the Red Cross (ICRC) has worked to preserve human dignity and relieve suffering caused by war and armed violence.

In collaboration with our Red Cross and Red Crescent partners around the world, we do everything we can to deliver life-saving aid, reconnect families and locate missing people - helping those who need it most, regardless of who they are and what side of the front line they are on.

We engage with authorities and armed forces on all sides, often confidentially, pressing for access to detainees to improve their living conditions and urging compliance with international humanitarian law to protect non-combatants, including from digital threats.

Purpose of the Role

As part of the Identity and Access Management (IAM) Product team within the IT organization, the Identity Specialist (Open-Source Technologies) is at the forefront of designing, building and operating modern on-premises identity solutions. The role is pivotal in expanding the use of open-source identity platforms, such as Keycloak and WSO2, to provide sovereign and reliable identity services to the ICRC and in implementing Zero Trust principles across our global operations. The Identity Specialist works closely with the rest of the IAM Product team, the identity architect, the security team and other product teams to align identity strategies with the requirements of our humanitarian mission and to ensure secure, seamless access for our distributed workforce.

Main Duties & Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies, including conditional and adaptive access controls, multi-factor authentication (MFA), identity federation and passwordless authentication, to enforce a robust Zero Trust security framework.
• Integrate these solutions with existing organizational technologies such as Windows Active Directory (AD) and Entra ID where required.
• Manage the lifecycle and evolution of the current customer identity and access management (CIAM) solution, WSO2 Identity Server, to ensure business continuity.
• Lead the architecture of Keycloak as the new on-premises identity provider (IdP), set it up as the new CIAM solution and lead the migration from WSO2 Identity Server to Keycloak.
• Ensure open-source identity platforms integrate with the ICRC’s identity governance solutions, streamlining Joiner-Mover-Leaver (JML) workflows and automated provisioning.
• Integrate monitoring, logging and alerting with corporate standards to maintain visibility over identity events and detect and address threats proactively.
• Provide sustainable and responsive incident and request support, working closely with cross-functional support teams to maintain service quality and platform reliability.
• Create and maintain technical documentation, deployment guides and configuration baselines to support operational continuity and team alignment.
• Foster an open-source community for identity management, collaborating actively with the ICRC’s Open-Source Programme Office and the wider open-source community.

Education & Professional Background

• University degree in a technical field, such as Computer Science or Information Technology, or equivalent professional experience.
• Minimum 10 years of relevant work experience, including 5 years of hands-on experience engineering and administering identity environments, with a strong focus on open-source technologies.
• Proven hands-on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• Experience in Agile product delivery environments (SAFe) using collaborative management tools is an asset.

Skills & Competencies

• In-depth understanding of modern identity and federation standards, including SAML, OAuth 2.0, OpenID Connect (OIDC) and JWT.
• Ability to adapt and maintain code in at least one programming language, ideally Java, use version control, submit pull requests and contribute changes upstream to open-source projects where appropriate.
• Proficiency in automation and scripting with tools such as PowerShell, Terraform, Ansible and CI/CD pipelines, including Infrastructure as Code (IaC), to build custom workflows and automate bulk operations.
• Experience provisioning and managing identity configuration natively with Terraform is an asset.

Additional Information

• Location: Geneva, Switzerland
• Type of Contract: Open-ended
• Length of Assignment: Long term assignment
• Activity Rate: 100%
• Start date: January 2027
• Recruiter: Alejandra Rodriguez
• Application deadline: Thursday, 19 November 2026

Please note that the finalization of this recruitment is subject to the validation of the 2027 PfR.

The ICRC values diversity and is committed to creating an inclusive working environment. We welcome applications from all qualified candidates.

Are you ready to explore the next chapter of your career? Apply now!

For more information about working at ICRC HQ please click here.

Our Values

At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviors based on these shared values. For more information on the ICRC values, please visit this page.