Senior IAM Engineer — Banking Identity & Access

OCBC; Hong Kong; On-site; HKD 420,000 - 640,000; Full time

Job summary

OCBC seeks an Identity Management professional to secure its banking ecosystem. You will implement IAM/PAM, govern access, and ensure secure provisioning and audits. The role emphasizes collaboration with IT and compliance teams to balance security and user experience.

You will work on identity access controls, integration with AD and CyberArk, and leverage MFA and SSO to protect critical resources. A strong background in IAM is essential.

Qualifications

• Bachelor's degree in computer science or cyber security preferred.
• Excellent communication and interpersonal skills; prioritize work effectively.
• Minimum 3+ years in IAM/IDM engineering or administration.
• Hands-on with identity tools and directory services (AD, LDAP, CyberArk, MFA).
• Knowledge of SAML, OAuth federation protocols.
• Understanding of Least Privilege, RBAC and Zero Trust.
• Preferred certifications: CISA, CIMP or vendor credentials.

Responsibilities

• Manage enterprise IAM, PAM, and identity governance frameworks.
• Maintain integration with AD, CyberArk, and related systems.
• Ensure compliance with HKMA, SG MAS, PCI-DSS and internal standards.
• Plan and execute day-to-day provisioning and de-provisioning; access reviews.
• Investigate identity-related cyber security incidents and anomalies.
• Escalate and resolve IAM issues with stakeholders quickly and efficiently.
• Support IAM audit matters and remediation plans.

Skills

Communication

Prioritization

Self-motivation

Interpersonal skills

Education

Bachelor's degree in CS / Cyber Security

Tools

Active Directory

LDAP

CyberArk

MFA

Job description

OCBC seeks an Identity Management professional to secure its banking ecosystem. You will implement IAM/PAM, govern access, and ensure secure provisioning and audits. The role emphasizes collaboration with IT and compliance teams to balance security and user experience.

You will work on identity access controls, integration with AD and CyberArk, and leverage MFA and SSO to protect critical resources. A strong background in IAM is essential.