Cybersecurity Analyst

VISA WORLDWIDE PTE. LIMITED; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Visa Worldwide PTE. LIMITED in Singapore is seeking an experienced Identity & Access Management engineer to design, implement, and operate ForgeRock-based solutions across global services.

You will collaborate with Operations, Database, and Middleware teams to meet SLA targets and support GDPR, PCI DSS, and ISO/IEC 27001 compliance. The role emphasizes hands-on IAM work, SSO/federation, MFA rollouts, and automation scripting (Shell/Python).

Qualifications

• 2+ years of relevant work experience and a Bachelor's degree, OR 5+ years of relevant work experience.
• Experience with SSO/federation standards (SAML 2.0, OpenID Connect, OAuth 2.0) and MFA concepts.
• Familiarity with web/application servers (Apache, Microsoft IIS, Apache) and directory services (LDAP).

Responsibilities

• Design, implement, and operate IAM solutions—primarily ForgeRock AM/DS.
• Support SSO integrations and federation activities; manage metadata, certificates/keys, and logs.
• Contribute to authorization policy updates and adaptive authentication journeys.
• Perform runbook-driven AM environment operations and supervised production changes.
• Validate and tune session management configurations across regions.
• Maintain LDAP settings and write simple automation scripts (Shell/Python).
• Conduct health checks of ForgeRock DS; verify replication and backups.
• Deploy ForgeRock web/app server agents across IIS, Apache, NGINX, Tomcat and JWS.
• Assist with MFA rollouts and monitor success/error rates.
• Provide L2 operational support, document KBs and post-incident notes.
• Collaborate with globally distributed teams and participate in change/release cadences.

Skills

SSO integrations

SAML 2.0

OpenID Connect

OAuth 2.0

MFA concepts

Shell/Python scripting

Jira

Git

Linux fundamentals

Windows Server administration

Change management

Education

Bachelor's degree

Advanced Degree (Masters, etc.)

Tools

ForgeRock AM/DS

Jenkins

Terraform

NGINX

IIS

Tomcat

Splunk

Elastic/Kibana

Grafana/Prometheus

Job description

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

Information security is foundational to Visa’s culture and critical to our leadership in electronic payments. This role sits within Cybersecurity’s Global Business‑to‑Business Identity & Access Management (B2B IAM) team, which secures access to Visa’s business portals and associated services worldwide. You will design, implement, and operate IAM solutions—primarily on ForgeRock—aligned to an evolving threat landscape, regulatory obligations, and enterprise architecture. You will partner closely with Operations, Database, and Middleware Engineering to meet or exceed SLA and availability targets while supporting compliance with GDPR, PCI DSS, and ISO/IEC 27001.

Essential Functions:

• Support SSO integrations on ForgeRock Access Management (AM): apply standard configs, run integration tests, and triage issues under guidance.
• Assist in setting up and maintaining federation using SAML 2.0, OpenID Connect, and OAuth 2.0 (manage metadata, certificates/keys, and basic troubleshooting with logs).
• Contribute to authorization policy updates and help build adaptive authentication trees/journeys in ForgeRock AM using approved patterns and templates.
• Participate in AM environment operations: follow runbooks to apply configuration changes, perform basic hardening/tuning in non‑production, execute supervised changes in production.
• Help validate and tune session management configurations across regions in test, raise risks and anomalies promptly.
• Assist with ForgeRock Directory Services (DS): routine health checks, replication status verification, user/directory sync jobs, and backups following SOPs.
• Maintain LDAP settings (password policies, ACIs) and write simple automation scripts (Shell/Python) for repetitive tasks.
• Execute performance and load test plans created by senior engineers, collect results and highlight bottlenecks.
• Deploy and manage ForgeRock web/app server agents via standard procedures across IIS, Apache HTTP Server, NGINX, Apache Tomcat, Node.js, and JBoss Web Server (JWS)—initially in test, then production with oversight.
• Implement and support Multi‑Factor Authentication (MFA) rollouts, monitor success/error rates and assist with troubleshooting.
• Provide L2 operational support on rotation, document KB articles and known‑error records, elevate appropriately.
• Produce clear documentation (change records, runbooks, build/ops notes) and keep them current.
• Collaborate effectively with globally distributed teams and participate in change/release cadences, make timely, well‑informed recommendations and raise urgent issues.

Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

Basic Qualifications:

• 2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience

Preferred Qualifications:

• 2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience
• 3 or more years of work experience with a Bachelor’s degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)
• Familiarity with:
• Web/application servers: Apache HTTP Server, Microsoft IIS, Apache
• Tomcat, exposure to NGINX or JWS is a plus.
• LDAP concepts and basic directory administration tasks.
• Linux fundamentals and basic Windows Server administration.
• Monitoring/logging tools (e.g., Splunk or Elastic/Kibana, Grafana/Prometheus) for dashboards and alerts.
• Understanding of SSO/federation standards (SAML 2.0, OpenID Connect, OAuth 2.0) and MFA concepts.
• Working knowledge of software development practices: Git, pull requests, basic scripting (Shell/Python), and issue/change tracking in Jira (or similar).
• Strong collaboration and communication skills with globally distributed teams, organized, detail oriented, and eager to learn.
• Awareness of release/change management and safe deployment patterns (e.g., peer reviews, maintenance windows, rollback plans).
• Hands on academic/internship experience integrating SSO or configuring IAM platforms (ForgeRock AM/DS preferred)
• Exposure to API auth concepts (OAuth 2.0 flows, JWT) and mTLS basics.
• Familiarity with web/security architecture fundamentals (TLS, reverse proxies, load balancers, WAF concepts).
• Basic CI/CD and infrastructure as code exposure (e.g., Jenkins/GitHub Actions/GitLab CI, Terraform) and automated config promotion between environments
• Experience writing small automations (Shell/Python/Groovy) to reduce toil, interest in using analytics/ML to automate repetitive IAM tasks.
• Awareness of incident/change/problem management processes and how they apply to IAM operations.
• Understanding of why GDPR, PCI DSS, and ISO/IEC 27001 matter for access controls, logging, and data handling.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.