Cyber Transformation Senior Engineer (IAM)

HRTX; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

HRTX is seeking a Cyber Transformation Senior Engineer (IAM) to design, implement, and optimize identity and access management across the organization. You will configure SSO/MFA, manage user lifecycle, and define access control policies to align with security standards.

The role requires hands-on IAM administration, collaboration with IT and security teams, and the ability to stay current with IAM trends and best practices. Prior consulting/advisory exposure is a plus.

Qualifications

• Bachelor's degree in CS/IT or related field.
• Minimum 2 years of IAM and IT security experience with IAM technologies such as Saviynt (REQUIRED).
• Strong understanding of IAM best practices, security and compliance requirements.
• Experience with Azure, Active Directory, SSO, PAM, MFA.
• Experience administering IAM/IGA solutions for provisioning/deprovisioning and workflow creation.

Responsibilities

• Design, plan, develop, and implement IAM solutions aligned to security and compliance requirements.
• Configure and maintain IAM platforms, SSO, and MFA systems.
• Manage user lifecycle: provisioning, deprovisioning, role changes; implement onboarding/offboarding automation.
• Define RBAC/ABAC policies and review/update access policies.
• Implement and maintain authentication/authorization mechanisms (LDAP, OAuth, SAML, Kerberos).
• Monitor IAM systems for vulnerabilities and ensure regulatory compliance.
• Participate in incident response related to IAM incidents.
• Document IAM processes; generate reports and metrics on access, compliance, and performance.
• Collaborate with IT, security, and compliance teams; assess vendors and integrators.

Skills

Saviynt

ForgeRock

SailPoint

Ping Identity

Active Directory

Azure AD

SSO

MFA

RBAC/ABAC

IAM/IGA

Cloud Security

Education

Bachelor's degree in Computer Science/Information Technology or related field

Tools

Saviynt

ForgeRock

SailPoint

Ping Identity

Azure Active Directory

Job description

About the job Cyber Transformation Senior Engineer (IAM)

• Design, plan, develop, and implement IAM solutions based on the organization's security and compliance requirements. Develop custom applications, connectors, and integrations to support IAM workflows and functionalities.
• Configure and maintain identity and access management systems, such as IAM platforms, Single Sign-On (SSO) solutions, and Multi-Factor Authentication (MFA) systems.
• Manage the entire user lifecycle, including provisioning, deprovisioning, and role changes, ensuring that access permissions are appropriate and timely. Implement automation to streamline user onboarding and offboarding processes.
• Define and enforce access control policies, including role-based access control (RBAC) and attribute-based access control (ABAC). Regularly review and update access policies to align with changing business needs and security requirements.
• Implement and maintain authentication mechanisms, such as LDAP, OAuth, SAML, and Kerberos. Ensure that authorization mechanisms are robust, accurate, and compliant with industry regulations.
• Monitor IAM systems for security vulnerabilities and promptly address any identified issues. Maintain compliance with relevant data protection regulations, industry standards, and internal policies.
• Actively participate in incident response activities related to identity and access management breaches or incidents.
• Maintain comprehensive documentation of IAM processes, configurations, and policies. Generate regular reports and metrics related to user access, compliance, and system performance.
• Collaborate with cross-functional teams, including IT, security, and compliance teams, to align IAM strategies with organizational goals. Work with vendors and third-party providers to evaluate and integrate IAM solutions.
• Stay up-to-date with emerging IAM technologies, best practices, and industry trends. Continuously improve IAM processes and systems to enhance security and efficiency.
• Facilitate knowledge transfer on IAM solution and/or IAM security best practices

Qualification

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 2 years of experience in IAM and IT security, including experience with IAM technologies such as Saviynt (REQUIRED), ForgeRock (preferred), SailPoint and Ping.
• Strong understanding of IAM best practices, security and compliance requirements, and experience with other IAM technologies such as Azure, Active Directory, Single Sign-On, PAM, and Multi-Factor authentication (MFA)
• Experience with implementing and maintaining IAM/IGA solutions and infrastructure.
• Experience with administration/management of IAM/IGA solutions for provisioning/deprovisioning of accounts, integration of applications and creation of workflows
• Strong Analytical and problem-solving skills, with the ability to identify and mitigate security risks.
• Excellent communication and project management skills, with the ability to work closely with cross-functional teams.
• Specific 1 year experience in consulting/advisory engagements and pre-sales of IAM/IGA solutions (preferred)
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Strong time management skills which allow for multi-tasking while managing shifting priorities
• Preferably has at least one of the following certifications:
• Certified Identity and Access Manager (CIAM)
• Certifications on SailPoint solutions/products
• Certifications on Saviynt solutions/products
• Certifications on CyberArk solutions/productsM