Cyber Security Architect

Ampstek; Kampung Malaysia Tambahan; On-site; MYR 180,000 - 340,000; Full time

Job summary

Ampstek is seeking an experienced IAM Architect to lead end-to-end architecture, design, implementation, and deployment of enterprise IAM solutions in our Kuala Lumpur office. You will define IAM architecture, technology roadmaps, integration patterns, and security standards to support scalable, compliant systems.

Ideal candidates have hands-on experience with major IAM stacks (Saviynt, SailPoint IIQ) and Privileged Access Management (CyberArk), plus familiarity with AD/LDAP, SSO, MFA, and

Qualifications

• Experience designing and implementing IAM architectures at scale.
• Strong governance, security, and compliance focus.
• Hands-on with major IAM platforms such as Saviynt or SailPoint IIQ.

Responsibilities

• Lead end-to-end IAM architecture and deployment.
• Define tech roadmap, integration patterns, security standards.
• Provide governance and design reviews for IAM projects.

Skills

IAM Architecture

RBAC

JML

SSO

MFA

Tools

Saviynt

SailPoint IIQ

CyberArk

Active Directory

Job description

Lead end-to-end architecture, design, implementation, and deployment of enterprise IAM solutions.

Define IAM architecture, technology roadmap, design principles, integration patterns, and security standards.

Lead large-scale IAM transformation and modernization initiatives.

Provide architecture governance, technical reviews, design reviews, and implementation guidance.

Ensure IAM solutions meet security, scalability, availability, performance, and compliance requirements.

Strong understanding of Joiner-Mover-Leaver (JML), RBAC, access certification, access provisioning/de-provisioning, SSO, MFA and federation.

Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, REST APIs and directory services

Desired skills*

• Candidates should have strong implementation/architecture expertise in one or more major IAM technology stacks, such as: Saviynt / SailPoint IIQ or ISC for IGA
• CyberArk for Privileged Access Management
• Active Directory / LDAP / Directory Services
• SSO, MFA, Federation and Password less Authentication