IAM Application Migration & Test Engineer

Hexa Business; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Hexa Business seeks an experienced IAM engineer to assess Falaina-integrated applications and migrate them to Microsoft Entra ID, configuring SSO/MFA, claims, certificates and redirect URLs across environments.

You will support application teams, develop SIT/UAT test cases, and validate MFA/CA requirements under guidance from the Entra Architect. Five years of IAM experience is expected.

Qualifications

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or equivalent.
• Minimum 5 years of IAM, application integration or security engineering experience with strong hands on SSO/MFA integration and testing.
• Mandatory demonstrable experience migrating or onboarding enterprise applications to Microsoft Entra ID Enterprise Applications.
• Strong practical experience with SAML 2.0 and OpenID Connect/OAuth 2.0, claims/attribute mapping, certificates and application troubleshooting.
• Experience developing IAM test cases, coordinating SIT/UAT and supporting enterprise MFA registration/migration is required.
• WHfB testing/rollout exposure is an added advantage.
• SC-300 Identity Access Admin Associate or relevant Microsoft/cloud/application security certification is preferred.

Responsibilities

• Assess each of the 27 Falaina-integrated applications, including authentication protocol, SSO/MFA configuration, claims/attributes, user population, dependencies, certificates, URLs, environments and business criticality.
• Support migration of the 27 Falaina-integrated applications to Microsoft Entra ID through assessment, configuration, test-case preparation, technical testing, UAT support, production cutover, rollback readiness and hypercare.
• Review the 80+ applications currently not onboarded to the central IAM platform and capture technical information required to determine Entra ID SSO/MFA integration feasibility.
• Classify applications by integration readiness and recommended authentication approach, and identify prerequisites, blockers, exceptions and dependencies requiring remediation or escalation.
• Configure and/or assist application teams with Microsoft Entra Enterprise Applications and application side SSO using SAML 2.0, OpenID Connect/OAuth 2.0 or other approved methods.
• Configure and validate claims, attributes, group/role mappings, redirect/reply URLs, certificates, metadata, user/group assignment and other SSO parameters.
• Implement and validate Entra MFA and Conditional Access requirements for onboarded applications in accordance with approved standards and under technical guidance from the Entra Architect.
• Prepare detailed application-specific SIT/UAT test cases covering positive and negative authentication, SSO, MFA, claims/roles, disabled/locked users, session behaviour, logout, access restrictions, fallback and rollback.
• Conduct technical testing, collect evidence, log defects, coordinate remediation/retesting and support application/business owners during UAT.
• Support an application migration factory approach to assess, configure, test and migrate/onboard multiple applications in parallel according to risk, readiness and business criticality.

Skills

IAM

SSO/MFA integration

OpenID Connect/OAuth 2.0

SAML 2.0

Test case development

UAT coordination

Security engineering

Microsoft Entra ID

Education

Bachelor's or Diploma in Computer Science / Information Technology / Cybersecurity

Tools

Microsoft Entra Enterprise Applications

SSO tooling

Job description

Key responsibilities

• Assess each of the 27 existing Falaina-integrated applications, including authentication protocol, SSO/MFA configuration, claims/attributes, user population, dependencies, certificates, URLs, environments and business criticality.
• Support migration of the 27 Falaina-integrated applications to Microsoft Entra ID through assessment, configuration, test-case preparation, technical testing, UAT support, production cutover, rollback readiness and hypercare.
• Review the 80+ applications currently not onboarded to the central IAM platform and capture technical information required to determine Entra ID SSO/MFA integration feasibility.
• Classify applications by integration readiness and recommended authentication approach, and identify prerequisites, blockers, exceptions and dependencies requiring remediation or escalation.
• Configure and/or assist application teams with Microsoft Entra Enterprise Applications and application side SSO using SAML 2.0, OpenID Connect/OAuth 2.0 or other approved methods.
• Configure and validate claims, attributes, group/role mappings, redirect/reply URLs, certificates, metadata, user/group assignment and other SSO parameters.
• Implement and validate Entra MFA and Conditional Access requirements for onboarded applications in accordance with approved standards and under technical guidance from the Entra Architect.
• Prepare detailed application-specific SIT/UAT test cases covering positive and negative authentication, SSO, MFA, claims/roles, disabled/locked users, session behaviour, logout, access restrictions, fallback and rollback.
• Conduct technical testing, collect evidence, log defects, coordinate remediation/retesting and support application/business owners during UAT.
• Support an application migration factory approach to assess, configure, test and migrate/onboard multiple applications in parallel according to risk, readiness and business criticality.

About you

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or equivalent.
• Minimum 5 years of IAM, application integration or security engineering experience with strong hands on SSO/MFA integration and testing.
• Mandatory demonstrable experience migrating or onboarding enterprise applications to Microsoft Entra ID Enterprise Applications.
• Strong practical experience with SAML 2.0 and OpenID Connect/OAuth 2.0, claims/attribute mapping, certificates and application troubleshooting.
• Experience developing IAM test cases, coordinating SIT/UAT and supporting enterprise MFA registration/migration is required.
• WHfB testing/rollout exposure is an added advantage.
• SC-300 Identity Access Admin Associate or relevant Microsoft/cloud/application security certification is preferred.