Information Security Engineer

Amadeus; Philippines; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Amadeus Information Security Engineer role in the Philippines seeks an IAM/IGA specialist to design, implement, and support access governance across enterprise applications. You will work with cross-functional teams to ensure accurate provisioning, reviews, and compliance with security policies.

The ideal candidate has a strong background in IAM/IGA, hands-on experience with One Identity Manager or similar platforms, and the ability to operate across regional teams in a hybrid work setup based

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field.
• 3–5+ years of IT experience, with at least 2 years in security or IAM/IGA operations.
• Hands-on experience with an IGA platform (One Identity Manager preferred; SailPoint/Saviynt acceptable).

Responsibilities

• Handle IAM/IGA requests and incidents per SLA and escalate complex cases.
• Design and implement IGA solutions, focusing on One Identity Manager.
• Support IAM integrations with apps including entitlement mapping and provisioning.
• Lead workshops to define roles, access models, and provisioning requirements.
• Maintain JML workflows with timely provisioning and deprovisioning.
• Run access recertification campaigns with reviewers and owners.
• Identify orphan accounts and excessive entitlements and remediate.
• Ensure compliance with PCI DSS, SOC, ISO 27001 and security policies.
• Document processes and integration specs for audit readiness.

Skills

IGA platform

One Identity Manager

RBAC

JML lifecycle

PowerShell

SQL

Azure AD

Education

Bachelor's degree in IT/CS

Tools

Active Directory

Azure AD

Job description

Job Title

Information Security Engineer

In This Job You Will

• Handle IAM/IGA operational requests and incidents, ensuring timely resolution in line with SLA commitments and escalating complex cases where appropriate.
• Participate in the design, development, and implementation of IGA solutions, with a focus on One Identity Manager or comparable platforms.
• Support the integration of IAM systems with enterprise applications, including requirements gathering, entitlement mapping, connector configuration, and go-live validation.
• Facilitate workshops with system owners and application teams to define role structures, access models, and provisioning requirements.
• Contribute to Join-Move-Leaver (JML) workflows, ensuring accurate and timely provisioning and deprovisioning of access across connected systems.
• Prepare, execute, and monitor access recertification campaigns, coordinating with reviewers and application owners to ensure timely completion and proper closure reporting.
• Identify and remediate orphan accounts, excessive entitlements, and access anomalies surfaced through recertification or audit activities.
• Ensure compliance with security protocols, policies, and regulatory requirements (including PCI DSS where applicable).
• Collaborate with cross-functional teams - security, compliance, IT, and business units - to address identity-related challenges and continuously improve IAM processes.
• Maintain accurate documentation of processes, integration specifications, and recertification outcomes to support audit readiness.

About The Ideal Candidate

• Bachelor's degree in Information Technology, Computer Science, or related field.
• Overall 3-5+ years of experience in IT, with a minimum of 2 years in an operational, security or implementation role.
• Hands-on experience with an IGA platform — One Identity Manager strongly preferred; SailPoint, Saviynt, or equivalent considered.
• Good understanding of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification, and provisioning/deprovisioning.
• Experience supporting application integrations within an IAM context, including entitlement analysis and connector requirements.
• Knowledge of directory services and identity stores (Active Directory, Microsoft Entra ID / Azure AD).
• Familiarity with scripting or development skills relevant to IAM automation (PowerShell, SQL, .NET, or equivalent).
• Understanding of cybersecurity principles and compliance frameworks (e.g., PCI DSS, SOC, ISO 27001).
• Ability to design and support solutions using IGA platform processes, workflows, and orchestration tools.
• Excellent written and verbal communication skills, with the ability to explain complex IAM/IGA topics clearly to both technical and non-technical audiences.
• Strong ownership mindset and ability to manage tasks autonomously while keeping stakeholders informed.
• Collaborative and results-oriented, with a proven ability to work effectively across geographically distributed teams.
• Organized and detail-oriented, with a structured approach to documentation, follow-up, and issue tracking.
• Leadership capability and initiative — able to drive topics forward, facilitate workshops, and coordinate across teams without direct authority.
• Shift Information: This position requires working a mid-shift as the platform support requires to follow CET business hours. Flexibility is expected to handle other shifts as needed by the business
• Hybrid Work Setup (2-3 days a week onsite). Location: BGC, Taguig

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.

Amadeus is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation,age, beliefs, disability or any other characteristics protected by law.

Be aware of recruitment scams

Amadeus Group never charges fees, requests payment, or asks for financial information during recruitment. All legitimate opportunities are communicated solely through official Amadeus channels, including our careers website. Any payment request or outreach via unofficial platforms (e.g., WhatsApp, Telegram) should be treated as fraudulent.