Tech Lead - IAM, SSO & Application Integration

Match Talent Limited; Hong Kong; Sur place; HKD 700 000 - 1 100 000; Plein temps

Résumé du poste

Match Talent Limited in Hong Kong is seeking an experienced Tech Lead - IAM, SSO & Application Integration to lead the design, implementation and support of enterprise identity and access management solutions, driving authentication, authorization and federation across key applications.

You will mentor teams, run architecture reviews, and integrate with IdPs such as Microsoft Entra ID, Okta, Ping Identity or Keycloak, collaborating with security, cloud and development groups to deliver secure,

Qualifications

• Bachelor's degree in CS/IT/Engineering/Cybersecurity.
• Minimum 6 years in IAM, application integration, security engineering.
• Hands-on with OAuth 2.0, OIDC, SAML 2.0, SSO, federation.
• Experience with IdPs: Microsoft Entra ID, Okta, Ping Identity, Keycloak, ADFS.
• Knowledge of RBAC, MFA, Identity Governance.
• Experience with REST APIs, token management, app security controls.
• Azure and/or AWS cloud familiarity.
• Insurance/financial services sector experience preferred.
• IAM/Cybersecurity/Cloud certs a plus.

Responsabilités

• Lead the design, implementation, and support of IAM, SSO, and federation solutions.
• Configure OAuth 2.0, OIDC, and SAML integrations across enterprise apps.
• Design secure authentication and authorization frameworks for web, mobile, and API systems.
• Integrate applications with IdPs such as Microsoft Entra ID, Okta, Ping Identity, Keycloak, or similar.
• Drive solution design workshops, architecture reviews, and stakeholder discussions.
• Develop and maintain API security solutions, including token management and access control policies.
• Collaborate with security, cloud, and development teams for secure, scalable integrations.
• Troubleshoot IAM, SSO, federation issues; establish governance and best practices.
• Support production deployments, incident management, and continuous service improvement.
• Provide technical leadership and mentorship to junior team members.

Connaissances

IAM

Application integration

Security engineering

RBAC

MFA

Identity Governance

Stakeholder management

Communication skills

Formation

Bachelor’s degree in CS/IT/Engineering/Cybersecurity

Outils

Microsoft Entra ID

Okta

Ping Identity

Keycloak

ADFS

Description du poste

We are seeking an experienced Tech Lead - IAM, SSO & Application Integration to lead the design, implementation, and support of enterprise identity and access management solutions. The successful candidate will drive authentication, authorization, federation, and application integration initiatives while providing technical leadership to project teams and stakeholders.

Key Responsibilities

• Lead the design, implementation, and support of IAM, SSO, and federation solutions.
• Configure and maintain OAuth 2.0, OIDC, and SAML integrations across enterprise applications.
• Design secure authentication and authorization frameworks for web, mobile, and API-based systems.
• Integrate applications with Identity Providers (IdPs) such as Microsoft Entra ID, Okta, Ping Identity, Keycloak, or similar platforms.
• Drive solution design workshops, technical discussions, and architecture reviews with stakeholders.
• Develop and maintain API security solutions, including token management and access control policies.
• Collaborate with development, infrastructure, cloud, and security teams to ensure secure and scalable integrations.
• Troubleshoot authentication, authorization, federation, and SSO-related issues.
• Establish IAM standards, governance processes, and best practices.
• Support production deployments, incident management, root cause analysis, and continuous service improvement.
• Provide technical leadership, mentorship, and guidance to junior team members.

Requirements

• Bachelor’s degree in computer science, Information Technology, Engineering, Cybersecurity, or a related discipline.
• Minimum 6 years of experience in IAM, application integration, security engineering, or related technical roles.
• Strong hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, Single Sign-On (SSO), and Federation technologies.
• Experience integrating applications with Microsoft Entra ID (Azure AD), Okta, Ping Identity, Keycloak, ADFS, or similar IAM platforms.
• Solid understanding of authentication, authorization, RBAC, MFA, and Identity Governance concepts.
• Experience with REST APIs, API security, token management, and application security controls.
• Familiarity with Azure and/or AWS cloud platforms.
• Exposure to Java, Node.js, Python, or .NET is an advantage.
• Strong problem-solving, stakeholder management, and communication skills.
• Experience within insurance, financial services, or other regulated industries is preferred.
• Relevant IAM, Cybersecurity, Cloud, or Microsoft certifications will be an advantage.