Information Security Engineer

Amadeus Hospitality; Manila; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Hybrid work setup

Job summary

Amadeus is seeking an Information Security Engineer to manage IAM/IGA operations and implement IAM solutions across enterprise applications. You will focus on One Identity Manager with potential SailPoint or Saviynt engagements, shaping RBAC models and JML lifecycles.

The role requires cross-functional collaboration, strong documentation, and proactive remediation of access anomalies while supporting audit readiness in a hybrid work setup in the Philippines.

Qualifications

• Bachelor’s degree in IT or related field.
• 3–5+ years in IT with 2+ years in security/implementation.
• Hands-on with IGA platforms; One Identity Manager preferred.
• Knowledge of IAM concepts: JML, RBAC, access certification.
• Experience integrating IAM in enterprise apps; entitlement analysis.
• Directory services knowledge: AD, Entra ID/Azure AD.
• Scripting/ development skills for IAM automation.

Responsibilities

• Handle IAM/IGA operational requests and incidents with SLA alignment.
• Assist design and implementation of IGA solutions and integration.
• Support integration of IAM systems with enterprise apps and go-live validation.
• Lead workshops to define role structures and provisioning requirements.
• Contribute to JML workflows and timely provisioning/deprovisioning.
• Prepare and monitor access recertification campaigns and reporting.
• Identify orphan accounts and entitlements; remediate anomalies.
• Ensure compliance with PCI DSS, SOC, ISO 27001 frameworks.
• Collaborate across security, compliance, IT, and business units to improve IAM.
• Document processes, specs, and recertification outcomes for audits.

Skills

IAM

IGA

One Identity Manager

SailPoint

Saviynt

RBAC

JML lifecycle

Access certification

PowerShell

SQL

Azure AD

Active Directory

PCI DSS

SOC

ISO 27001

Documentation

Education

Bachelor’s degree in Information Technology, Computer Science, or related field

Tools

One Identity Manager

SailPoint

Saviynt

Active Directory

Job description

Information Security Engineer

In this job you will:

• Handle IAM/IGA operational requests and incidents, ensuring timely resolution in line with SLA commitments and escalating complex cases where appropriate.
• Participate in the design, development, and implementation of IGA solutions, with a focus on One Identity Manager or comparable platforms.
• Support the integration of IAM systems with enterprise applications, including requirements gathering, entitlement mapping, connector configuration, and go-live validation.
• Facilitate workshops with system owners and application teams to define role structures, access models, and provisioning requirements.
• Contribute to Join-Move-Leaver (JML) workflows, ensuring accurate and timely provisioning and deprovisioning of access across connected systems.
• Prepare, execute, and monitor access recertification campaigns, coordinating with reviewers and application owners to ensure timely completion and proper closure reporting.
• Identify and remediate orphan accounts, excessive entitlements, and access anomalies surfaced through recertification or audit activities.
• Ensure compliance with security protocols, policies, and regulatory requirements (including PCI DSS where applicable).
• Collaborate with cross-functional teams - security, compliance, IT, and business units - to address identity-related challenges and continuously improve IAM processes.
• Maintain accurate documentation of processes, integration specifications, and recertification outcomes to support audit readiness.

About the ideal candidate

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Overall 3-5+ years of experience in IT, with a minimum of 2 years in an operational, security or implementation role.
• Hands-on experience with an IGA platform - One Identity Manager strongly preferred; SailPoint, Saviynt, or equivalent considered.
• Good understanding of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification, and provisioning/deprovisioning.
• Experience supporting application integrations within an IAM context, including entitlement analysis and connector requirements.
• Knowledge of directory services and identity stores (Active Directory, Microsoft Entra ID / Azure AD).
• Familiarity with scripting or development skills relevant to IAM automation (PowerShell, SQL, .NET, or equivalent).
• Understanding of cybersecurity principles and compliance frameworks (e.g., PCI DSS, SOC, ISO 27001).
• Ability to design and support solutions using IGA platform processes, workflows, and orchestration tools.
• Excellent written and verbal communication skills, with the ability to explain complex IAM/IGA topics clearly to both technical and non-technical audiences.
• Strong ownership mindset and ability to manage tasks autonomously while keeping stakeholders informed.
• Collaborative and results-oriented, with a proven ability to work effectively across geographically distributed teams.
• Organized and detail-oriented, with a structured approach to documentation, follow-up, and issue tracking.
• Leadership capability and initiative - able to drive topics forward, facilitate workshops, and coordinate across teams without direct authority.

Shift Information

This position requires working a mid-shift as the platform support requires to follow CET business hours. Flexibility is expected to handle other shifts as needed by the business. Hybrid Work Setup (2-3 days a week onsite).

Location

BGC, Taguig

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.

Amadeus is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.

As part of our global team of 20,000+ passionate team members across 100+ locations, you will join a community united by a love for travel and technology.

We're not just shaping the future of travel; we're using it as a force for good, enriching lives and supporting our planet.

Here, you will be free to innovate and grow with driven colleagues.

Join us on a journey where you will help us bring the world closer!