User Access Management Engineer_3132

Allianz Technology; Kuala Lumpur; On-site; MYR 60,000 - 100,000; Full time

Job summary

Allianz Technology Malaysia, Regional Delivery Center, seeks a User Access Management Engineer to manage day-to-day UAM operations, documentation and SLA-aligned tasks.

You will deploy and maintain IAM solutions (OneIdentity or SailPoint), perform UARs, and collaborate on security enhancements within multi-cloud environments.

Strong knowledge of AD, OAuth/SAML, and ITIL experience preferred; degree in IT and certifications advantageous.

Qualifications

• Familiarity with IAM concepts and best practices.
• Experience with OneIdentity or SailPoint preferred.
• Knowledge of OAuth2, SAML and federation standards.

Responsibilities

• Manage day-to-day User Access Management operations.
• Deploy, configure and maintain IAM solutions and reviews.
• Perform periodic User Access Reviews (UAR).
• Work within ITIL environments and SLA commitments.
• Collaborate on security enhancements across multi-cloud setups.

Skills

IAM principles

OAuth & SAML

Active Directory

PowerShell

AD tooling

Problem solving

Communication

Education

Degree in IT

Tools

OneIdentity

SailPoint

Ping Identity

Okta

ForgeRock

SCIM

Job description

Position Summary

The User Access Management Engineer at Allianz Technology Malaysia, Regional Delivery Center (RDC) is responsible to manage day to day operations of User Access Management (UAM) with processes execution, documentation, and workflows monitoring with staff performing UAM and human resource related duties, and complete tasks assigned within service level agreement (SLA).

The User Access Management Engineer at Allianz Technology Malaysia, Regional Delivery Center (RDC) is responsible to manage day to day operations of User Access Management (UAM) with processes execution, documentation, and workflows monitoring with staff performing UAM and human resource related duties, and complete tasks assigned within service level agreement (SLA).

Key Responsibilities

• Deploy, configure, and maintain IAM solutions (OneIdentity Or SailPoint) for our customers but not limited to IAM platforms, SSO and MFA.
• Preform regular reviews and updates to ensure the ongoing efficiency of deployed IAM solutions.
• Administration of IAM solutions, encompassing the incorporation of new services within multi-cloud environments.
• Experience in working ITIL environment and responding & execution to requests within SLA.
• Have implemented Identity in one of - IAM solutions (OneIdenity / Ping / Okta / ForgeRock/SailPoint)
• Microsystems / Oracle IAM / NetIQ / Tivoli etc). Ideally, knows a bit about SCIM, but not essential.
• Keep up to date about industry best practices and emerging trends in IAM, ensuring the organization remains at the forefront of security standards.
• Collaborate with the team to design, enforce & implement enhancements and updates to stay ahead of evolving IAM related security threats and IAM technology advancements based on IT security framework aligned with group & Operating Entities’ regulator standard & guideline. Leading, participating and completing various IT Security project implementations and issues when needed.
• Perform periodic User Access Review (UAR).
• Any other duties when deemed necessary. Completing projects on various issues when needed.

Job Requirements

• Understanding of Identity and Access Management principles and practices.
• 1-3 years’ experience using one of the following IAM platforms -OneIdenity OR SailPoint.
• Demonstrated experience with Identity/IAM tools such as OneId Job servers (or any of the Ping tools) is preferred.
• Practical experience with OAUTH and SAML.
• Knowledge of federation standards, including SAML 2.0, OAuth 2.0, OpenID Connect. Experience in AD scripting and PowerShell commands is an added advantage.
• Previous .NET programmers would be highly regarded.
• Effective communication and excellent problem-solving skills.
• Experience in handing AD tools like Active Directory, LDAP, Azure AD and Computers (ADUC), AD Sites and Services (ADSS), AD Domain Services (ADDS), Domain Name System, Group Policy Object (GPO).
• Possess a Degree in IT field, certification in Information Technology Infrastructure Library (ITIL), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP) would be an added advantage.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Great to have you on board. Let's care for tomorrow.

Note: Having different strengths, experiences, perspectives and approaches is an integral part of Allianz‘ company culture. One means to achieve this is a regular rotation of Allianz Executive employees across functions, Allianz entities and geographies. Therefore, the company expects from its employees a general openness and a high motivation to regularly change positions and collect experiences across Allianz Group.