Information Security Engineer

Amadeus; Makati; Hybride; PHP 600 000 - 1 200 000; Plein temps

Avantages offerts par ce poste

Hybrid work setup

Office in BGC, Taguig

Résumé du poste

Amadeus is seeking an Information Security Engineer to manage IAM/IGA operations and drive implementation of IGA solutions, with a focus on One Identity Manager. You will support cross-system integrations, define access models, and coordinate JML workflows across teams.

The role requires 3–5+ years in IT with security/implementation experience, a strong grasp of IAM concepts such as RBAC and access certification, and hands-on scripting and directory services knowledge.

Qualifications

• Bachelor’s degree in IT, CS, or related field.
• 3–5+ years in IT with at least 2 years in an operational, security or implementation role.
• Hands-on with an IGA platform (One Identity Manager preferred; SailPoint/Saviynt acceptable).
• Strong understanding of IAM/IGA concepts: JML, RBAC, least privilege, access certification, provisioning/deprovisioning.
• Experience supporting application integrations within IAM, including entitlement analysis and connectors.

Responsabilités

• Handle IAM/IGA operational requests and incidents with timely resolution per SLA.
• Participate in design, development, and implementation of IGA solutions (One Identity Manager-focused).
• Support IAM system integrations with enterprise apps, including requirements gathering and go-live validation.
• Facilitate workshops to define role structures, access models, and provisioning requirements.
• Coordinate Join-Move-Leaver (JML) workflows and recertification activities.

Connaissances

IAM/IGA

One Identity Manager

RBAC

PowerShell

SQL

Documentation

Communication

PCI DSS

ISO 27001

Formation

Bachelor's degree in IT/CS

Outils

Active Directory

Azure AD

SailPoint

Saviynt

Description du poste

Job Title

Information Security Engineer

In this job you will:

• Handle IAM/IGA operational requests and incidents, ensuring timely resolution in line with SLA commitments and escalating complex cases where appropriate.
• Participate in the design, development, and implementation of IGA solutions, with a focus on One Identity Manager or comparable platforms.
• Support the integration of IAM systems with enterprise applications, including requirements gathering, entitlement mapping, connector configuration, and go-live validation.
• Facilitate workshops with system owners and application teams to define role structures, access models, and provisioning requirements.
• Contribute to Join-Move-Leaver (JML) workflows, ensuring accurate and timely provisioning and deprovisioning of access across connected systems.
• Prepare, execute, and monitor access recertification campaigns, coordinating with reviewers and application owners to ensure timely completion and proper closure reporting.
• Identify and remediate orphan accounts, excessive entitlements, and access anomalies surfaced through recertification or audit activities.
• Ensure compliance with security protocols, policies, and regulatory requirements (including PCI DSS where applicable).
• Collaborate with cross-functional teams - security, compliance, IT, and business units - to address identity-related challenges and continuously improve IAM processes.
• Maintain accurate documentation of processes, integration specifications, and recertification outcomes to support audit readiness.

About the ideal candidate:

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Overall 3-5+ years of experience in IT, with a minimum of 2 years in an operational, security or implementation role.
• Hands‑on experience with an IGA platform — One Identity Manager strongly preferred; SailPoint, Saviynt, or equivalent considered.
• Good understanding of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification, and provisioning/deprovisioning.
• Experience supporting application integrations within an IAM context, including entitlement analysis and connector requirements.
• Knowledge of directory services and identity stores (Active Directory, Microsoft Entra ID / Azure AD).
• Familiarity with scripting or development skills relevant to IAM automation (PowerShell, SQL, .NET, or equivalent).
• Understanding of cybersecurity principles and compliance frameworks (e.g., PCI DSS, SOC, ISO 27001).
• Ability to design and support solutions using IGA platform processes, workflows, and orchestration tools.
• Excellent written and verbal communication skills, with the ability to explain complex IAM/IGA topics clearly to both technical and non-technical audiences.
• Strong ownership mindset and ability to manage tasks autonomously while keeping stakeholders informed.
• Collaborative and results-oriented, with a proven ability to work effectively across geographically distributed teams.
• Organized and detail-oriented, with a structured approach to documentation, follow‑up, and issue tracking.
• Leadership capability and initiative — able to drive topics forward, facilitate workshops, and coordinate across teams without direct authority.
• Shift Information: This position requires working a mid-shift as the platform support requires to follow CET business hours. Flexibility is expected to handle other shifts as needed by the business
• Hybrid Work Setup (2-3 days a week onsite). Location: BGC, Taguig

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, andas a role model for an inclusive employee experience.

Amadeus is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation,age, beliefs, disability or any other characteristics protected by law.