IAM & SSO Architecture Lead for Enterprise Apps

Match Talent Limited; Hong Kong; On-site; HKD 700,000 - 1,100,000; Full time

Job summary

Match Talent Limited in Hong Kong is seeking an experienced Tech Lead - IAM, SSO & Application Integration to lead the design, implementation and support of enterprise identity and access management solutions, driving authentication, authorization and federation across key applications.

You will mentor teams, run architecture reviews, and integrate with IdPs such as Microsoft Entra ID, Okta, Ping Identity or Keycloak, collaborating with security, cloud and development groups to deliver secure,

Qualifications

• Bachelor's degree in CS/IT/Engineering/Cybersecurity.
• Minimum 6 years in IAM, application integration, security engineering.
• Hands-on with OAuth 2.0, OIDC, SAML 2.0, SSO, federation.
• Experience with IdPs: Microsoft Entra ID, Okta, Ping Identity, Keycloak, ADFS.
• Knowledge of RBAC, MFA, Identity Governance.
• Experience with REST APIs, token management, app security controls.
• Azure and/or AWS cloud familiarity.
• Insurance/financial services sector experience preferred.
• IAM/Cybersecurity/Cloud certs a plus.

Responsibilities

• Lead the design, implementation, and support of IAM, SSO, and federation solutions.
• Configure OAuth 2.0, OIDC, and SAML integrations across enterprise apps.
• Design secure authentication and authorization frameworks for web, mobile, and API systems.
• Integrate applications with IdPs such as Microsoft Entra ID, Okta, Ping Identity, Keycloak, or similar.
• Drive solution design workshops, architecture reviews, and stakeholder discussions.
• Develop and maintain API security solutions, including token management and access control policies.
• Collaborate with security, cloud, and development teams for secure, scalable integrations.
• Troubleshoot IAM, SSO, federation issues; establish governance and best practices.
• Support production deployments, incident management, and continuous service improvement.
• Provide technical leadership and mentorship to junior team members.

Skills

IAM

Application integration

Security engineering

RBAC

MFA

Identity Governance

Stakeholder management

Communication skills

Education

Bachelor’s degree in CS/IT/Engineering/Cybersecurity

Tools

Microsoft Entra ID

Okta

Ping Identity

Keycloak

ADFS

Job description

Match Talent Limited in Hong Kong is seeking an experienced Tech Lead - IAM, SSO & Application Integration to lead the design, implementation and support of enterprise identity and access management solutions, driving authentication, authorization and federation across key applications.

You will mentor teams, run architecture reviews, and integrate with IdPs such as Microsoft Entra ID, Okta, Ping Identity or Keycloak, collaborating with security, cloud and development groups to deliver secure,