Information Security Engineer

Amadeus; Taguig; Hybrid; PHP 1,004,000 - 1,562,000; Full time

Job summary

Amadeus in Taguig is seeking an Information Security Engineer to lead IAM/IGA operations, design and implement identity governance solutions, and ensure secure integration with enterprise apps. The role emphasizes strong collaboration with security, compliance, IT, and business teams across the CET hours.

You will drive JML workflows, conduct access recertification campaigns, and address orphan accounts and access anomalies while maintaining audit readiness.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• 3–5+ years in IT with 2+ years in operational, security or implementation roles.
• Hands-on experience with an IGA platform (One Identity Manager preferred).
• Knowledge of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification and provisioning/deprovisioning.

Responsibilities

• Handle IAM/IGA operational requests and incidents in line with SLA commitments.
• Participate in design, development, and implementation of IGA solutions.
• Support integration of IAM systems with enterprise applications.
• Facilitate workshops to define role structures, access models, and provisioning requirements.
• Manage Join-Move-Leaver (JML) workflows for provisioning and deprovisioning.

Skills

IAM/IGA concepts

Leadership

Cross-functional collaboration

Excellent communication

Ownership mindset

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

One Identity Manager

SailPoint

Saviynt

Active Directory

Microsoft Entra ID / Azure AD

Job description

Job Title

Information Security Engineer

In this job you will:

• Handle IAM/IGA operational requests and incidents, ensuring timely resolution in line with SLA commitments and escalating complex cases where appropriate.
• Participate in the design, development, and implementation of IGA solutions, with a focus on One Identity Manager or comparable platforms.
• Support the integration of IAM systems with enterprise applications, including requirements gathering, entitlement mapping, connector configuration, and go-live validation.
• Facilitate workshops with system owners and application teams to define role structures, access models, and provisioning requirements.
• Contribute to Join-Move-Leaver (JML) workflows, ensuring accurate and timely provisioning and deprovisioning of access across connected systems.
• Prepare, execute, and monitor access recertification campaigns, coordinating with reviewers and application owners to ensure timely completion and proper closure reporting.
• Identify and remediate orphan accounts, excessive entitlements, and access anomalies surfaced through recertification or audit activities.
• Ensure compliance with security protocols, policies, and regulatory requirements (including PCI DSS where applicable).
• Collaborate with cross-functional teams - security, compliance, IT, and business units - to address identity-related challenges and continuously improve IAM processes.
• Maintain accurate documentation of processes, integration specifications, and recertification outcomes to support audit readiness.

About the ideal candidate:

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Overall 3-5+ years of experience in IT, with a minimum of 2 years in an operational, security or implementation role.
• Hands-on experience with an IGA platform — One Identity Manager strongly preferred; SailPoint, Saviynt, or equivalent considered.
• Good understanding of IAM/IGA concepts: JML lifecycle, RBAC, least privilege, access certification, and provisioning/deprovisioning.
• Experience supporting application integrations within an IAM context, including entitlement analysis and connector requirements.
• Knowledge of directory services and identity stores (Active Directory, Microsoft Entra ID / Azure AD).
• Familiarity with scripting or development skills relevant to IAM automation (PowerShell, SQL, .NET, or equivalent).
• Understanding of cybersecurity principles and compliance frameworks (e.g., PCI DSS, SOC, ISO 27001).
• Ability to design and support solutions using IGA platform processes, workflows, and orchestration tools.
• Excellent written and verbal communication skills, with the ability to explain complex IAM/IGA topics clearly to both technical and non-technical audiences.
• Strong ownership mindset and ability to manage tasks autonomously while keeping stakeholders informed.
• Collaborative and results-oriented, with a proven ability to work effectively across geographically distributed teams.
• Organized and detail-oriented, with a structured approach to documentation, follow-up, and issue tracking.
• Leadership capability and initiative — able to drive topics forward, facilitate workshops, and coordinate across teams without direct authority.
• Shift Information: This position requires working a mid-shift as the platform support requires to follow CET business hours. Flexibility is expected to handle other shifts as needed by the business
• Hybrid Work Setup (2-3 days a week onsite). Location: BGC, Taguig

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.

Amadeus is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.