Senior Project Manager Access Management (Iam)

Ihg, L.C.; Philippines; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Ihg, L.c. is seeking a Senior Project Manager for Access Management (IAM) in the Philippines. The role leads large-scale migration from PingFederate to PingOne/DaVinci, oversees MFA deployments, and drives SSO integrations (OIDC/SAML) with a focus on security, governance, and run maintenance across hotel systems.

The candidate will coordinate cross-functional teams, vendors, and franchise stakeholders, ensuring on-time delivery, adoption, and production stability in a high-volume IAM environment.

Qualifications

• 8–12+ years in IT Project/Program Management, with 5+ years in IAM / Security
• Large-scale SSO / IAM transformations (300+ applications)
• Ping Identity suite experience (PingFederate, PingOne, PingID, DaVinci)
• Knowledge of SAML, OIDC, OAuth; identity lifecycle and directory integrations (AD, LDAP)

Responsibilities

• Lead migration of 500+ applications from PingFederate to PingOne/DaVinci flows
• Manage application migration waves (pilot → scale → complex apps such as OIDC/SAML)
• Drive MFA transformation rollout across franchise hotel community (Entrust Grid Card)
• Coordinate service desk readiness, change management, and onboarding for MFA/SSO rollout
• Lead intake and delivery of new MFA and SSO integrations (OIDC, SAML)
• Accountable for post-launch stability and run-excellence metrics

Skills

IT Project Management

IAM / Security

Vendor management

Stakeholder management

SAML / OIDC / OAuth

Tools

PingFederate

PingOne

PingID

DaVinci

Entrust

Job description

Senior Project Manager Access Management (IAM)

Company : Ihg, L.c. Job Type : Full Time Philippines

Key Responsibilities

1. Program Delivery – Ping Migration (Core)

• Lead phased migration of 500+ applications from PingFederate to PingOne / DaVinci flows.
• Manage application migration waves (pilot → scale → complex apps such as OIDC/SAML → legacy/radius)
• Drive convergence activities (user migration, policy alignment, data cleanup)
• Identify and manage internal project dependencies and external across infrastructure, AD, network, and vendor teams

2. MFA Transformation to Franchisees – Entrust Grid Card

• Own execution of Entrust MFA Grid Card rollout across franchise hotel community.
• Drive:
  • User enrollment strategy and adoption
  • Implementation of Ping authentication flows
  • Phased rollout across applications and hotel systems
• Coordinate:
  • Service Desk readiness (training, KBs, support model)
  • Change Management readiness (user communications and onboarding experience)
• Manage technical dependencies (Davinci flows, sync, APIs) impacting rollout timing

3. MFA / SSO Integration Pipeline

• Lead intake and delivery of new MFA and SSO integrations (OIDC, SAML)
• Manage high-volume pipeline:
  • Intake → prioritization → design → build → deploy → stabilize
• Coordinate certificate renewals, policy updates, and onboarding standards
• Track and report integration throughput and backlog status

4. Production Stability & Run

• Accountable for post-launch stabilization and ongoing environment health
• Oversee:
  • Incident management (authentication failures, outages, API issues)
  • Root cause analysis and remediation tracking
  • Capacity and performance concerns across Ping / Entrust platforms
• Drive “run excellence” model:
  • Clear escalation paths
  • Issue tracking and trending
  • Continuous improvement backlog

5. Vendor & Stakeholder Management

• Serve as primary coordination point across:
  • Ping Identity
  • Entrust
  • System integrators (Accenture, HCL, etc.)
• Run structured cadences:
  • Vendor calls (issue tracking, enhancements)
  • Internal delivery standups and executive status reviews
• Manage contract dependencies, resource constraints, and delivery risk

6. Program Governance & Reporting

• Provide clear executive-level reporting:
  • Migration progress (apps, %, milestones)
  • Risks, blockers, resourcing gaps
  • Production stability metrics
• Maintain:
  • Integrated project plan
  • RAID log (Risks, Actions, Issues, Decisions)
• Ensure alignment to security roadmap (PCI, Zero Trust, MFA)

Required Experience

• 8–12+ years in IT Project/Program Management, with 5+ years in IAM / Security
• Proven experience delivering:
  • Large-scale SSO / IAM transformations (300+ applications preferred)
  • Ping Identity suite (PingFederate, PingOne, PingID, DaVinci)
  • MFA implementations (Entrust or similar)
• Strong understanding of:
  • SAML, OIDC, OAuth
  • Identity lifecycle and directory integrations (AD, LDAP)
  • Authentication flows and policy design

Work Arrangement

• Graveyard Shift following AMER region time zone.