Sr CyberSecurity Engineer

ConnectedGroup; Hong Kong; On-site; HKD 550,000 - 950,000; Full time

Job summary

ConnectedGroup is seeking an experienced IAM Specialist to support ForgeRock-based identity and access management across a complex enterprise environment. The role focuses on identity governance, user lifecycle management, authentication services, and access controls to ensure secure, compliant access to business-critical systems and applications.

This role requires strong ForgeRock expertise with hands-on SSO, MFA, and identity federation capabilities, plus experience integrating enterprise

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related discipline.
• Minimum 6 years of experience in Identity & Access Management, Identity Security, Cyber Security, or related disciplines.
• Hands-on ForgeRock IAM experience in an enterprise environment.
• Experience integrating IAM with cloud services, enterprise apps, and directory services.
• Experience in regulated sectors (finance/insurance/telecom) preferred.
• Certifications in IAM/Cyber Security/ForgeRock/Cloud are advantageous.
• Excellent English communication; Cantonese or Putonghua would be an advantage.

Responsibilities

• Administer, support, and enhance IAM platforms and services.
• Manage end-to-end identity lifecycle (Joiner, Mover, Leaver).
• Design, implement, and support authentication and authorization solutions using ForgeRock technologies.
• Build and maintain SSO, MFA, and identity federation capabilities.
• Configure and maintain RBAC models and access governance frameworks.
• Integrate internal and third-party applications with IAM platforms using industry-standard authentication protocols.
• Support user provisioning, deprovisioning, and entitlement management across enterprise applications.
• Conduct periodic access reviews, certification exercises, and segregation of duties assessments.
• Collaborate with application owners and business stakeholders to define access requirements and entitlement models.
• Support Privileged Access Management (PAM) initiatives and access governance controls.
• Investigate and resolve identity, authentication, and access-related incidents and technical issues.
• Participate in IAM transformation projects, platform upgrades, and security enhancement initiatives.
• Develop and maintain IAM operational procedures, standards, and technical documentation.
• Work closely with Cyber Security and Audit teams to ensure compliance with regulatory and security requirements.
• Drive automation and process improvement initiatives to improve efficiency and user experience.

Skills

ForgeRock IAM

SSO

MFA

RBAC

JML

Identity governance

Access reviews

Education

Bachelor's degree in IT/CS/Cyber Security

Tools

ForgeRock

Cloud services

Directory services

Job description

We are seeking an experienced IAM Specialist to support and enhance the organisation's Identity and Access Management (IAM) capabilities across a complex enterprise environment. This role will be responsible for managing identity governance, user lifecycle management, authentication services, and access controls to ensure secure, compliant, and efficient access to business-critical systems and applications.

This role will require strong expertise in Forgerock Identity Platform, with hands-on experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, access management, and identity lifecycle processes. In addition, the role requires experience integrating enterprise applications, cloud platforms, and directory services while maintaining robust identity security controls and regulatory compliance standards.

Responsibilities of the Role

• Administer, support, and enhance the organisation's Identity and Access Management platforms and services.
• Manage end-to-end identity lifecycle processes, including Joiner, Mover, and Leaver (JML) activities.
• Design, implement, and support authentication and authorization solutions using ForgeRock technologies.
• Build and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation capabilities.
• Configure and maintain Role-Based Access Control (RBAC) models and access governance frameworks.
• Integrate internal and third-party applications with IAM platforms using industry-standard authentication protocols.
• Support user provisioning, deprovisioning, and entitlement management across enterprise applications.
• Conduct periodic access reviews, certification exercises, and segregation of duties assessments.
• Collaborate with application owners and business stakeholders to define access requirements and entitlement models.
• Support Privileged Access Management (PAM) initiatives and access governance controls.
• Investigate and resolve identity, authentication, and access-related incidents and technical issues.
• Participate in IAM transformation projects, platform upgrades, and security enhancement initiatives.
• Develop and maintain IAM operational procedures, standards, and technical documentation.
• Work closely with Cyber Security and Audit teams to ensure compliance with regulatory and security requirements.
• Drive automation and process improvement initiatives to improve efficiency and user experience.

Required Skills for the Role

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related discipline.
• Minimum 6 years of experience in Identity & Access Management, Identity Security, Cyber Security, or related disciplines.
• Proven hands-on experience administering and supporting ForgeRock IAM solutions in an enterprise environment.
• Experience integrating IAM platforms with cloud services, enterprise applications, and directory services.
• Experience within large-scale enterprise, financial services, insurance, telecommunications, or regulated environments is highly preferred.
• Professional certifications related to IAM, Cyber Security, ForgeRock, or Cloud technologies would be advantageous.
• Excellent English communication skills, Cantonese or Putonghua would be an advantage