Vitol

Energy

IAMEngineer

$115–155k ~AI est. Geneva, Geneva, Switzerland FULL TIME
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for mid candidates.

The Brief

“IAM Engineer at Vitol. Skills: Modern Authentication, Entra ID tenant, Cloud identity patterns. Maintain Entra ID tenant. Modernize authentication systems”

Industry & Context.

Energy
Problems you'll solve

Troubleshooting; Root cause analysis

What They're Looking For.

Must Have

4/5+ years in IAM, 4/5+ years in Authentication, 4/5+ years in Security engineering, Bachelor's degree in Information Security, Bachelor's degree in Computer Science, Equivalent professional experience

Nice to Have

SC-300 certification, AZ-500 certification, MS-500 certification

What You'll Do.

Maintain Entra ID tenant

Modernize authentication systems

Implement RBAC models

Implement ABAC models

Partner with Security teams

Partner with Infrastructure teams

Partner with Cloud teams

Partner with Development teams

Establish access control standards

Support access model design

Support access model management

Integrate external applications

Integrate internal applications

Lead engagement with dev teams

Lead workshops with dev teams

Advise developers on auth flows

Advise developers on auth patterns

Embed IAM best practices

Define reusable auth components

Define reusable authorization components

Ensure internal libraries support least privilege

Ensure libraries support secure token validation

Ensure libraries support secure session management

Ensure libraries support claims-based authorization

Ensure libraries support secretless authentication

Ensure libraries support modern federation patterns

Act as IAM subject matter expert

Help teams choose protocols

Help teams choose identity architecture

Ensure secure provisioning

Ensure de-provisioning

Implement identity security policies

Maintain identity security policies

Enforce identity security policies

Apply policies across users

Apply policies across applications

Apply policies across platforms

Provide Tier 3 support

Implement effective resolutions

Automate identity lifecycle workflows

Automate access management workflows

Improve operational efficiency

Standardise processes

Support scalable IAM operations

Create IAM as a service documentation

Own IAM as a service documentation

Define onboarding processes

Define integration patterns

Define standard operating procedures

Provide guidance on consuming IAM services

How You'll Work.

Team & Collaboration

Partner with Security teams; Partner with Infrastructure teams; Partner with Cloud teams; Partner with Development teams; Work with Development teams; Work with infrastructure teams; Work with security teams; Work with cloud teams; Work with application teams; Close collaboration with teams; Close collaboration with stakeholders

Communication Scope

Communicate architecture decisions

Process & Methodology

Roadmap

Full Job Description

Vitol is an energy and commodities company with revenues of $331 billion in 2024; its primary business is the trading and distribution of energy products globally – it trades over seven million barrels per day of crude oil and products and, at any time, has 250 ships transporting its cargoes. Vitol’s clients include national oil companies, multinationals, leading industrial companies and utilities. Founded in Rotterdam in 1966, today Vitol serves clients from some 40 offices worldwide and is invested in energy assets globally including 24mM3 of storage, 850kbpd of refining capacity, and 10,000 service stations. To date, we have committed over $2.5 billion of capital to renewable projects and are identifying and developing low-carbon opportunities around the world. As our IAM Engineer - Modern Authentication specialist, you will own / maintain the technical configuration of our Entra ID tenant with a primary focus on modernizing our authentication systems, as part of a wider Identity & Access Management strategy / project roadmap. Join our growing IAM team to have a hands-on key role on Authentication/Authorization topics, securing application onboarding & systems configuration hardening (ex: conditional access / adaptative MFA), designing, implementing & maintaining a robust, scalable framework to ensure a frictionless end-user experience. * Access Management & Governance: Define, implement, and maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models across Vitol identity platforms, including on-prem AD, Entra ID and AWS. Partner with Security, Infrastructure, Cloud and Development teams to establish consistent access control standards across platforms and applications. Support the design and management of access models for applications, APIs, service accounts, cloud platforms and workload identities. * System and Application Integration: Integrate external and internal applications with Vitol's identity providers for Single Sign-O

Free ATS check

Applying for this IAM Engineer role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on SmartRecruiters

  • SmartRecruiters often includes a video screening step — check camera and mic permissions.
  • Link your GitHub or portfolio directly in the profile section for technical roles.
  • Applications may be reviewed by AI scoring before reaching a recruiter — use keywords from the job description.

ANONYMOUS · UNFILTERED

What do employees actually say about Vitol?

Real rants from real employees. Read before you apply.

Read Company Rants →