IAM Engineer - OKTA/ForgeRock/PING Identity

ASTEK SINGAPORE INNOVATION TECHNOLOGY PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Astek Singapore Innovation Technology Pte. Ltd. seeks an IAM Engineer to design, implement, and enhance enterprise access management across on-premises and cloud environments.

You will work on identity providers and IAM protocols to support secure authentication and authorization across multiple platforms. Responsibilities include configuring platforms like Okta, ForgeRock and Ping Identity, developing scripts, and ensuring CI/CD and IaC practices.

Qualifications

• Degree in Computer Science, Information Technology, or related discipline.
• Hands-on experience with Okta, ForgeRock and/or Ping Identity.
• Knowledge of Authentication, Authorization, SSO and MFA.
• Experience with SAML, OAuth, OpenID, SCIM, and LDAP.
• Scripting experience with PowerShell, JavaScript, VBScript, Perl, or similar.
• Strong REST APIs and JSON knowledge.
• Experience with DevOps, DevSecOps, CI/CD, IaC, containers, AWS, and Azure.
• Strong analytical and troubleshooting abilities.

Responsibilities

• Design, implement, configure, and customise Access Management platforms such as Okta, ForgeRock, and Ping Identity.
• Implement authentication and authorization solutions across on-premises and cloud environments (IaaS, PaaS, SaaS).
• Configure and integrate IAM protocols and standards (SAML, OAuth, OpenID, SCIM, LDAP, MFA).
• Develop scripts and integrations using PowerShell, JavaScript, VBScript, Perl, REST APIs, and JSON.
• Support DevOps/DevSecOps and CI/CD practices including IaC and containerised apps.
• Implement and support IAM solutions within AWS and Azure environments.
• Participate in IAM platform migration and technology transitions.
• Troubleshoot complex IAM incidents and provide guidance to operations teams.
• Prepare solution designs, SOPs, technical documentation, and conduct knowledge transfer.

Skills

Okta

ForgeRock

Ping Identity

Authentication

Authorization

SSO

MFA

IAM architecture

REST APIs

JSON

DevOps

CI/CD

IaC

AWS

Azure

Education

Bachelor's degree in Computer Science or Information Technology

Tools

PowerShell

JavaScript

VBScript

Perl

Job description

Role Overview

We are looking for an IAM Engineer to support an Identity Provider (IDP) project, focusing on the design, implementation, integration, and enhancement of enterprise Access Management solutions across on-premises and cloud environments.

Key Responsibilities

• Design, implement, configure, and customise Access Management platforms such as Okta, ForgeRock, and Ping Identity.
• Implement authentication and authorization solutions across on-premises infrastructure and cloud environments covering IaaS, PaaS, and SaaS.
• Configure and integrate IAM protocols and standards including SAML, OAuth, OpenID, SCIM, LDAP, and MFA.
• Develop scripts and integrations using VBScript, PowerShell, Perl, JavaScript, REST APIs, and JSON.
• Support DevOps/DevSecOps and CI/CD practices, including Infrastructure as Code (IaC) and containerised applications.
• Implement and support IAM solutions within AWS and Azure environments.
• Participate in IAM platform migration and technology transition initiatives.
• Troubleshoot complex IAM incidents and provide technical guidance to operations and support teams.
• Prepare solution designs, SOPs, technical documentation, and conduct knowledge transfer.

Requirements

• Degree in Computer Science, Information Technology, or a related discipline.
• Strong hands-on experience with Okta, ForgeRock and/or Ping Identity.
• Strong knowledge of Authentication, Authorization, SSO, MFA, and IAM architecture.
• Experience with SAML, OAuth, OpenID, SCIM, and LDAP.
• Scripting/programming experience with PowerShell, JavaScript, VBScript, Perl, or similar technologies.
• Good understanding of REST APIs and JSON.
• Knowledge of DevOps, DevSecOps, CI/CD, IaC, containers, AWS, and Azure.
• Strong analytical and troubleshooting skills with the ability to adapt quickly and collaborate effectively.

Good to Have

• Experience migrating from one IAM/Access Management platform to another.