Sr CyberSecurity Engineer

ConnectedGroup Limited; Hong Kong; On-site; HKD 420,000 - 700,000; Full time

Job summary

ConnectedGroup Limited is seeking an experienced IAM Specialist to strengthen identity and access management across a complex enterprise. You will manage lifecycle events, implement ForgeRock-based authentication, and support SSO, MFA, and identity federation for secure access to critical systems.

The role requires hands-on ForgeRock experience in large environments, with focus on RBAC, PAM, and regulatory compliance.

Qualifications

• Bachelor's degree in IT, CS, cyber security, or related field.
• 6+ years of Identity & Access Management or security experience.
• Hands-on ForgeRock IAM implementation in an enterprise environment.
• Experience integrating IAM with cloud services, directories, and apps.
• Experience in regulated industries is preferred.
• Professional IAM or cyber security certifications are advantageous.

Responsibilities

• Administer and enhance IAM platforms and services.
• Manage end-to-end identity lifecycle (Joiner/Mover/Leaver).
• Design and support authentication and authorization using ForgeRock.
• Develop SSO, MFA, and identity federation capabilities.
• Configure RBAC models and access governance.
• Integrate apps with IAM platforms and protocols.
• Support provisioning, deprovisioning, and entitlements.
• Conduct access reviews and segregation of duties assessments.
• Collaborate with owners to define access requirements.
• Support PAM initiatives and access governance controls.
• Investigate IAM incidents and participate in security projects.
• Document IAM operations, standards, and procedures.

Skills

IAM

ForgeRock

SSO

MFA

RBAC

PAM

Education

Bachelor's degree in Information Technology / Cyber Security / Computer Science

Tools

ForgeRock IAM

Job description

We are seeking an experienced IAM Specialist to support and enhance the organisation's Identity and Access Management (IAM) capabilities across a complex enterprise environment. This role will be responsible for managing identity governance, user lifecycle management, authentication services, and access controls to ensure secure, compliant, and efficient access to business-critical systems and applications.

This role will require strong expertise in Forgerock Identity Platform, with hands-on experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, access management, and identity lifecycle processes. In addition, the role requires experience integrating enterprise applications, cloud platforms, and directory services while maintaining robust identity security controls and regulatory compliance standards.

Responsibilities of the Role

• Administer, support, and enhance the organisation's Identity and Access Management platforms and services.
• Manage end-to-end identity lifecycle processes, including Joiner, Mover, and Leaver (JML) activities.
• Design, implement, and support authentication and authorization solutions using ForgeRock technologies.
• Build and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation capabilities.
• Configure and maintain Role-Based Access Control (RBAC) models and access governance frameworks.
• Integrate internal and third-party applications with IAM platforms using industry-standard authentication protocols.
• Support user provisioning, deprovisioning, and entitlement management across enterprise applications.
• Conduct periodic access reviews, certification exercises, and segregation of duties assessments.
• Collaborate with application owners and business stakeholders to define access requirements and entitlement models.
• Support Privileged Access Management (PAM) initiatives and access governance controls.
• Investigate and resolve identity, authentication, and access-related incidents and technical issues.
• Participate in IAM transformation projects, platform upgrades, and security enhancement initiatives.
• Develop and maintain IAM operational procedures, standards, and technical documentation.
• Work closely with Cyber Security and Audit teams to ensure compliance with regulatory and security requirements.
• Drive automation and process improvement initiatives to improve efficiency and user experience.

Required Skills for the Role

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related discipline.
• Minimum 6 years of experience in Identity & Access Management, Identity Security, Cyber Security, or related disciplines.
• Proven hands-on experience administering and supporting ForgeRock IAM solutions in an enterprise environment.
• Experience integrating IAM platforms with cloud services, enterprise applications, and directory services.
• Experience within large-scale enterprise, financial services, insurance, telecommunications, or regulated environments is highly preferred.
• Professional certifications related to IAM, Cyber Security, ForgeRock, or Cloud technologies would be advantageous.
• Excellent English communication skills, Cantonese or Putonghua would be an advantage