Cyber Security Consultant - Identity & Access Management (SailPoint/Ping Identity)

BGC Group Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

BGC Group Pte Ltd in Singapore seeks an IAM Consultant who blends strategic architecture with hands-on delivery. You’ll design secure identity solutions, work with SailPoint and Ping Identity, and lead projects from workshops to go-live and beyond.

You'll translate complex business requirements into scalable identity workflows, manage authentication and authorization flows, and ensure ongoing security and stability post-deployment. Collaboration with stakeholders is key to success.

Qualifications

• Degree in Cybersecurity, Computer Science, IT, Engineering, or similar
• 3-6 years in cybersecurity / IAM / security engineering
• Hands-on delivery experience with SailPoint (ISC and/or IIQ) and Ping Identity (PingAM/PingDS)
• Solid grasp of identity lifecycle management, access certification, RBAC, SSO, federation, and directory services
• Comfort working with SAML, OAuth 2.0, OpenID Connect, and LDAP

Responsibilities

• Design work with customers and technical teams to unpack needs and turn them into solid IAM architecture: lifecycle management, access governance, authentication flows, and privileged access strategy
• Build and configure the platforms (SailPoint and Ping Identity) with provisioning, certifications, RBAC, SSO/federation
• Own delivery end to end from requirements workshop through go-live and beyond
• Provide L2/L3 support post go-live and drive for a more secure, stable environment

Skills

IAM

Cybersecurity

Stakeholder communication

Troubleshooting

Education

Degree in Cybersecurity

Tools

SailPoint

Ping Identity

Job description

Shape the identity security backbone of enterprise organisations

We're hiring an IAM Consultant who can move fluidly between whiteboard and workflow config - someone who enjoys translating messy business requirements into clean, secure, scalable identity solutions, and who's just as comfortable in a stakeholder workshop as they are deep in a SailPoint rule editor.

What you'll actually be doing

• Design work that matters. You'll sit with customers and technical teams to unpack what they actually need - not just what they asked for - and turn that into solid IAM architecture: lifecycle management, access governance, authentication flows, and privileged access strategy.
• Build and configure the platforms.
  • SailPoint (Identity Security Cloud and/or IdentityIQ) - provisioning, joiner-mover-leaver automation, certifications, RBAC, connector and workflow customisation
  • Ping Identity (PingAM + PingDS) - authentication journeys, directory services, SSO/federation via SAML, OAuth 2.0, and OIDC
• Own delivery end to end. From the first requirements workshop through go-live and beyond - design, build, test, deploy, document, and hand over - you'll be a real owner of your workstream, not just a ticket-closer.
• Keep things running. Post go-live, you'll provide L2/L3 support, chase down root causes, patch and upgrade systems, and keep pushing for a more stable, more secure environment.
• Stay sharp. Bring a security-first mindset to everything, flag risks before they become incidents, and help build reusable methods and accelerators that make the next project faster.

What you bring

• A degree in Cybersecurity, Computer Science, IT, Engineering, or similar
• 3-6 years in cybersecurity / IAM / security engineering
• Real hands-on delivery experience with SailPoint (ISC and/or IIQ) and Ping Identity (PingAM/PingDS)
• Solid grasp of identity lifecycle management, access certification, RBAC, SSO, federation, and directory services
• Comfort working with SAML, OAuth 2.0, OpenID Connect, and LDAP
• A track record of integrating IAM platforms into real enterprise environments - apps, databases, directories, the works
• Strong troubleshooting instincts and the communication skills to explain your thinking to both engineers and executives