IAM Access Architect & Automation Engineer

U3 PROJECTS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

U3 PROJECTS PTE. LTD. seeks an experienced IAM specialist to design, implement, and customize identity and access management solutions across on-prem and cloud workloads.

You will work with OKTA, ForgeRock, or PING Identity, covering SAML, OAuth, OpenID, SCIM, LDAP, and MFA mechanisms. The ideal candidate will bring hands-on scripting skills, DevOps/DevSecOps experience, and a strong ability to document designs and SOPs for operations teams.

Qualifications

• Hands-on design, implementation, and customization of IAM solutions like OKTA, ForgeRock, or PING Identity.
• Strong knowledge of authentication/authorization across on-prem and cloud workloads.
• Experience with SAML, OAuth, OpenID, SCIM, LDAP, and MFA mechanisms.
• Scripting skills (VBScript, PowerShell, Perl, JavaScript) and REST/JSON.
• Experience with DevOps/DevSecOps, CI/CD, IaC, and IAM in AWS/Azure.
• Migration experience between IAM tools is preferred.
• Ability to document design and SOPs and transfer knowledge to operations.

Responsibilities

• Document solution design and Standard Operating Procedures.
• Provide knowledge transition to operations and support teams.
• Guide the support team in resolving technical issues and incidents.
• Demonstrate Agile mindset, fast learner, and adaptability.
• Collaborate with teams as a strong analytical problem-solver.

Skills

Access management

OKTA

ForgeRock

PING Identity

Authentication concepts

Cloud IAM

SAML

OAuth

OpenID

SCIM

LDAP

MFA mechanisms

Scripting

REST APIs

DevOps

IaC

AWS IAM

Azure IAM

Documentation

Incident guidance

Agile

Teamwork

Analytical skills

Problem solving

Tools

CI/CD tools

Containers

IAM tooling

Job description

U3 PROJECTS PTE. LTD. seeks an experienced IAM specialist to design, implement, and customize identity and access management solutions across on-prem and cloud workloads.

You will work with OKTA, ForgeRock, or PING Identity, covering SAML, OAuth, OpenID, SCIM, LDAP, and MFA mechanisms. The ideal candidate will bring hands-on scripting skills, DevOps/DevSecOps experience, and a strong ability to document designs and SOPs for operations teams.