IAM Engineer (Identity and Access Management Engineer)

Tata Consultancy Services; Taguig; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Tata Consultancy Services in the Philippines seeks an experienced IAM Engineer with 5+ years of hands-on IAM design, implementation, and support to safeguard enterprise identities and access.

The role covers SSO, MFA, RBAC/ABAC, PAM, IAM governance, and collaboration with security, infrastructure and application teams, with automation through PowerShell, Python or Bash to improve security and efficiency.

Qualifications

• 5+ years of hands-on IAM experience.
• Experience with SSO, MFA, OAuth, SAML, OpenID Connect.
• Proven ability to design RBAC/ABAC models.
• Familiarity with security frameworks and compliance standards.

Responsibilities

• Design, implement, and maintain IAM solutions.
• Manage user lifecycles including provisioning and de-provisioning.
• Configure SSO, MFA, and federation services.
• Integrate applications with IAM platforms.
• Automate IAM tasks with scripting.

Skills

Identity & Access Management

SSO / MFA

RBAC ABAC

Automation scripting

Azure AD Entra ID

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SailPoint

CyberArk

Okta

Ping Identity

ForgeRock

Saviynt

Active Directory

Job description

We are seeking an experienced Identity and Access Management (IAM) Engineer with a minimum of 5 years of hands‑on experience in designing, implementing, and supporting IAM solutions. The successful candidate will be responsible for managing user identities, access controls, authentication systems, and security compliance across enterprise environments.

Key Responsibilities

• Design, implement, and maintain IAM solutions and processes.
• Manage user lifecycle activities including provisioning, de-provisioning, and access reviews.
• Configure and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation services.
• Integrate applications with IAM platforms such as Azure AD (Entra ID), Okta, SailPoint, CyberArk, Ping Identity, or similar technologies.
• Develop and maintain role-based access control (RBAC) models.
• Conduct access certification and governance activities to ensure compliance.
• Troubleshoot authentication, authorization, and identity-related issues.
• Collaborate with security, infrastructure, and application teams to implement secure access management practices.
• Automate IAM processes using scripting languages such as PowerShell, Python, or Bash.
• Ensure compliance with security standards, policies, and regulatory requirements.
• Monitor IAM systems and implement improvements to enhance security and efficiency.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of experience in Identity and Access Management.
• Strong experience with:
• Active Directory and LDAP
• SSO, MFA, OAuth, SAML, OpenID Connect
• Privileged Access Management (PAM)
• Identity Governance and Administration (IGA)
• Experience with IAM tools such as SailPoint, CyberArk, Okta, Ping Identity, ForgeRock, or Saviynt.
• Knowledge of security frameworks and compliance standards.
• Experience with automation and scripting.

Preferred Qualifications

• Relevant certifications such as:
• Microsoft Certified: Identity and Access Administrator Associate
• CISSP
• Certified Identity and Access Manager (CIAM)
• SailPoint or CyberArk certifications
• Experience working in cloud environments (Azure, AWS, GCP).
• Knowledge of Zero Trust security principles.

Key Skills

• Identity Governance
• Access Management
• RBAC and ABAC
• SSO & MFA
• PAM Solutions
• Security Compliance
• Active Directory
• PowerShell/Python Automation
• Problem Solving and Stakeholder Management

This role is ideal for a security-focused professional with strong IAM expertise and a passion for protecting enterprise identities and access systems.