Cyber Transformation Junior Lead Engineer (IAM)

HRTX; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

HRTX is seeking a Cyber Transformation Junior Lead Engineer (IAM) to design, implement, and manage IAM solutions aligned with security and compliance requirements. You will configure IAM platforms, manage user lifecycles, and enforce RBAC/ABAC policies while collaborating with IT, security, and compliance teams.

The role emphasizes hands-on IAM administration (SAML, OAuth, LDAP, Kerberos), incident response involvement, and continuous process improvement.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 4+ years in IAM and IT security with Saviynt required; ForgeRock/SailPoint/Ping preferred.
• Strong IAM and security/compliance knowledge across platforms: Azure, AD, SSO, MFA, PAM.
• Experience implementing IAM/IGA solutions and provisioning/deprovisioning workflows.
• Excellent communication and project management skills.
• 1 year consulting/advisory and pre-sales experience preferred.
• Cloud compute/storage/security knowledge and virtualization best practices.
• Certifications such as CIAM, SailPoint, Saviynt, CyberArk are a plus.

Responsibilities

• Design, plan, develop, and implement IAM solutions per security requirements.
• Configure and maintain IAM systems including SSO, MFA, and connectors.
• Manage user lifecycle: provisioning, deprovisioning, role changes; automate onboarding/offboarding.
• Define RBAC/ABAC policies; update policies as needed.
• Implement authentication (LDAP, OAuth, SAML, Kerberos); ensure robust authorization.
• Monitor IAM systems for vulnerabilities; ensure compliance with data protection standards.
• Participate in incident response related to IAM breaches.
• Maintain documentation, generate reports on access, compliance, and performance.
• Collaborate with IT, security, compliance, vendors; evaluate IAM solutions.
• Stay updated on IAM tech trends and continuously improve IAM processes.

Skills

IAM best practices

Security & compliance

Cross-functional collaboration

Problem solving

Communication

Project management

Time management

Pre-sales consulting

Education

Bachelor's degree in Computer Science

Tools

Saviynt

ForgeRock

SailPoint

Ping

Azure

Active Directory

SSO

PAM

MFA

CyberArk

Job description

About the job Cyber Transformation Junior Lead Engineer (IAM)

• Design, plan, develop, and implement IAM solutions based on the organization's security and compliance requirements. Develop custom applications, connectors, and integrations to support IAM workflows and functionalities.
• Configure and maintain identity and access management systems, such as IAM platforms, Single Sign-On (SSO) solutions, and Multi-Factor Authentication (MFA) systems.
• Manage the entire user lifecycle, including provisioning, deprovisioning, and role changes, ensuring that access permissions are appropriate and timely. Implement automation to streamline user onboarding and offboarding processes.
• Define and enforce access control policies, including role-based access control (RBAC) and attribute-based access control (ABAC). Regularly review and update access policies to align with changing business needs and security requirements.
• Implement and maintain authentication mechanisms, such as LDAP, OAuth, SAML, and Kerberos. Ensure that authorization mechanisms are robust, accurate, and compliant with industry regulations.
• Monitor IAM systems for security vulnerabilities and promptly address any identified issues. Maintain compliance with relevant data protection regulations, industry standards, and internal policies.
• Actively participate in incident response activities related to identity and access management breaches or incidents.
• Maintain comprehensive documentation of IAM processes, configurations, and policies. Generate regular reports and metrics related to user access, compliance, and system performance.
• Collaborate with cross-functional teams, including IT, security, and compliance teams, to align IAM strategies with organizational goals. Work with vendors and third-party providers to evaluate and integrate IAM solutions.
• Stay up-to-date with emerging IAM technologies, best practices, and industry trends. Continuously improve IAM processes and systems to enhance security and efficiency.
• Facilitate knowledge transfer on IAM solution and/or IAM security best practices

Qualification

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 4 years of experience in IAM and IT security, including experience with IAM technologies such as Saviynt (REQUIRED), ForgeRock (preferred), SailPoint and Ping.
• Strong understanding of IAM best practices, security and compliance requirements, and experience with other IAM technologies such as Azure, Active Directory, Single Sign-On, PAM, and Multi-Factor authentication (MFA)
• Experience with implementing and maintaining IAM/IGA solutions and infrastructure.
• Experience with administration/management of IAM/IGA solutions for provisioning/deprovisioning of accounts, integration of applications and creation of workflows
• Strong Analytical and problem-solving skills, with the ability to identify and mitigate security risks.
• Excellent communication and project management skills, with the ability to work closely with cross-functional teams.
• Specific 1 year experience in consulting/advisory engagements and pre-sales of IAM/IGA solutions (preferred)
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Strong time management skills which allow for multi-tasking while managing shifting priorities
• Preferably has at least one of the following certifications:
• Certified Identity and Access Manager (CIAM)
• Certifications on SailPoint solutions/products
• Certifications on Saviynt solutions/products
• Certifications on CyberArk solutions/products