Lead IAM Engineer

Horizontal Talent; Petaling Jaya; On-site; MYR 180,000 - 360,000; Full time

Job summary

Horizontal Talent is assisting a multinational organisation in the recruitment of an experienced Lead IAM Engineer to strengthen its enterprise Identity and Access Management capabilities.

This role combines hands‑on engineering expertise with technical leadership, focusing on identity governance, access management, security controls, and automation. You will lead complex IAM initiatives and support the development of a centralised Enterprise IAM operating model across the organisation.

Qualifications

• 8–12+ years in IAM design, implementation, and support.
• Experience delivering IAM in global environments with access governance.
• Strong experience with SailPoint, Saviynt or One Identity.
• Experience with Ping Identity, Okta or Microsoft Entra ID.
• Knowledge of AD, LDAP, Azure or AWS.
• Python or PowerShell scripting and automation.
• Understanding of RBAC/ABAC/SoD and privileged access management.
• Experience with incident troubleshooting and root cause analysis.
• Ability to lead technical initiatives and mentor engineers.

Responsibilities

• Lead IAM engineering: design, implement, test, integrate, and maintain IGA, SSO, MFA, and PAM.
• Provide technical direction for IAM initiatives and architecture decisions.
• Lead technical workstreams in Agile/Scrum environments ensuring timely delivery.
• Act as Tier 3 escalation for complex IAM incidents and root-cause analysis.
• Develop automation scripts using Python and PowerShell to improve identity provisioning and cloud access.
• Define and implement SoD policies, access controls, and entitlement management.
• Support audits and remediation of access governance findings.
• Ensure IAM integrations with enterprise apps, cloud platforms, directory services, and monitoring systems.
• Mentor engineers and maintain technical documentation and runbooks.

Skills

IAM design & implementation

Identity governance

SSO/MFA/PAM

Python

PowerShell

RBAC/ABAC/SoD

Access provisioning

Troubleshooting

Mentorship & leadership

Education

Bachelor's or Master's degree in Computer Science, Engineering, Information Technology

Tools

SailPoint

Saviynt

One Identity

Ping Identity

Okta

Microsoft Entra ID

Active Directory

LDAP

Azure

AWS

Python

PowerShell

SAP integrations

Job description

About Horizontal Talent

Horizontal Talent is a US-based recruitment and staffing company specialising in IT, Technology, Digital, Engineering, and professional talent solutions. We partner with organisations across various industries to connect them with skilled professionals who support business growth, innovation, and digital transformation.

About Horizontal Talent

Horizontal Talent is a US-based recruitment and staffing company specialising in IT, Technology, Digital, Engineering, and professional talent solutions. We partner with organisations across various industries to connect them with skilled professionals who support business growth, innovation, and digital transformation.

We are currently assisting a leading multinational organisation in the recruitment of an experienced Lead IAM Engineer to strengthen its enterprise cybersecurity and Identity & Access Management capabilities.

About The Role

We are seeking an experienced Lead IAM Engineer to provide senior technical leadership in the design, implementation, integration, and support of enterprise Identity and Access Management (IAM) solutions.

This role combines hands‑on engineering expertise with technical leadership, focusing on identity governance, access management, security controls, and automation. You will lead complex IAM initiatives, troubleshoot critical technical issues, establish engineering standards, and support the development of a centralised Enterprise IAM operating model across the organisation.

Key Responsibilities

• IAM Engineering: Lead the design, implementation, testing, integration, and maintenance of Identity Governance and Administration (IGA), Single Sign-On (SSO), Multi‑Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.
• Technical Leadership: Provide technical direction for IAM engineering initiatives, guide architectural decisions, and ensure alignment with enterprise security standards.
• Project Delivery: Lead technical workstreams from planning through implementation within Agile/Scrum environments, ensuring timely and quality delivery.
• Advanced Troubleshooting: Act as the Tier 3 escalation point for complex IAM incidents, perform root cause analysis, and implement permanent corrective actions.
• Automation: Develop scripts and automation solutions using Python and PowerShell to improve identity provisioning, cloud access management, and operational efficiency.
• Identity Governance & Compliance: Define and implement Segregation of Duties (SoD) policies, access controls, role design standards, and entitlement management processes.
• Risk Management & Audit: Implement risk-based IAM controls, support internal and external audits, and drive remediation of access governance and compliance findings.
• Architecture & Integration: Ensure IAM solutions integrate effectively with enterprise applications, cloud platforms, directory services, and security monitoring systems.
• Mentorship & Documentation: Provide technical guidance to engineering teams and maintain technical documentation, solution designs, architecture diagrams, and operational runbooks.

Requirements

• Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, or a related discipline.
• 8–12+ years of hands‑on experience in Identity and Access Management design, implementation, and support.
• Proven experience delivering enterprise IAM solutions in complex, global environments with established access governance controls.
• Strong practical experience with Identity Governance platforms such as SailPoint, Saviynt, or One Identity.
• Experience with access management and SSO solutions such as Ping Identity, Okta, or Microsoft Entra ID.
• Strong knowledge of Active Directory, LDAP, cloud identity security, and platforms such as Microsoft Azure or AWS.
• Experience with Python or PowerShell scripting and automation.
• Solid understanding of role‑based access control (RBAC), attribute‑based access control (ABAC), Segregation of Duties (SoD), access provisioning, and privileged access management.
• Experience with advanced incident troubleshooting, root cause analysis, and technical escalation.
• Proven ability to lead technical initiatives, mentor engineers, and collaborate with cybersecurity, enterprise architecture, infrastructure, application, and risk teams.
• Experience with SAP or other enterprise application integrations is an advantage.