IAM/IGA Engineer — Hybrid, Mid-Shift, Global Access

Amadeus; Taguig; Hybrid; PHP 1,004,000 - 1,562,000; Full time

Job summary

Amadeus in Taguig is seeking an Information Security Engineer to lead IAM/IGA operations, design and implement identity governance solutions, and ensure secure integration with enterprise apps. The role emphasizes strong collaboration with security, compliance, IT, and business teams across the CET hours.

You will drive JML workflows, conduct access recertification campaigns, and address orphan accounts and access anomalies while maintaining audit readiness.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• 3–5+ years in IT with 2+ years in operational, security or implementation roles.
• Hands-on experience with an IGA platform (One Identity Manager preferred).
• Knowledge of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification and provisioning/deprovisioning.

Responsibilities

• Handle IAM/IGA operational requests and incidents in line with SLA commitments.
• Participate in design, development, and implementation of IGA solutions.
• Support integration of IAM systems with enterprise applications.
• Facilitate workshops to define role structures, access models, and provisioning requirements.
• Manage Join-Move-Leaver (JML) workflows for provisioning and deprovisioning.

Skills

IAM/IGA concepts

Leadership

Cross-functional collaboration

Excellent communication

Ownership mindset

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

One Identity Manager

SailPoint

Saviynt

Active Directory

Microsoft Entra ID / Azure AD

Job description

Amadeus in Taguig is seeking an Information Security Engineer to lead IAM/IGA operations, design and implement identity governance solutions, and ensure secure integration with enterprise apps. The role emphasizes strong collaboration with security, compliance, IT, and business teams across the CET hours.

You will drive JML workflows, conduct access recertification campaigns, and address orphan accounts and access anomalies while maintaining audit readiness.