IAM PAM Engineer

Kyndryl Inc.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

As an IAM / PAM Engineer, you will operate and improve enterprise identity, privileged access, authentication, and access governance platforms in a complex managed services environment. You will support identity lifecycle management, privileged account administration, federation, SSO, MFA, application onboarding, access reviews, and audit compliance activities.

You will work closely with infrastructure, security, application, and business stakeholders to ensure secure and efficient access

Qualifications

• Hands-on PAM and privileged account administration experience.
• Knowledge of identity management, federation, SSO, MFA and RBAC.
• Experience with Entra ID or similar identity platforms.
• Experience within ITSM, access control, audit and governance processes.
• Strong troubleshooting across authentication, identity and certificate tech.
• Ability to support after-hours activities and major incidents.

Responsibilities

• Operate and maintain IAM, PAM, EPM, federation, and identity governance platforms.
• Manage privileged account onboarding, credential rotation, and access reviews.
• Administer user, group, role, application, and service-principal changes.
• Configure and support SSO, MFA, federation, and identity integrations.
• Support access governance campaigns, entitlement reviews, and compliance.
• Monitor platform health and resolve authentication, synchronization, identity issues.
• Coordinate platform upgrades, vulnerability remediation, and configuration improvements.
• Maintain audit evidence and documentation for compliance reviews.
• Drive automation and process improvements to reduce risk.

Skills

PAM expertise

Identity management

Federation

SSO

MFA

RBAC

Application identity

Entra ID

ITSM

Access control

Audit

Governance

Troubleshooting

Authentication

Certificates

On-call

Tools

SIEM

PowerShell

Python

APIs

Workflow tools

CyberArk

SailPoint

Entra ID

ADFS

Job description

In Person

Singapore, South West, Singapore

Full time

R-69904

Who We Are

At Kyndryl, we run and reimagine the mission‑critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI‑powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well‑being is prioritized and your potential can thrive.

The Role

Your role

As an IAM / PAM Engineer, you will operate and improve enterprise identity, privileged access, authentication, and access governance platforms in a complex managed services environment. You will support identity lifecycle management, privileged account administration, federation, SSO, MFA, application onboarding, access reviews, and audit compliance activities.

You will work closely with infrastructure, security, application, and business stakeholders to ensure secure and efficient access management practices. Success in this role is demonstrated through reliable identity operations, strong security controls, audit readiness, and continuous service improvement.

What you will do

• Operate and maintain IAM, PAM, EPM, federation, and identity governance platforms.

• Manage privileged account onboarding, credential rotation, access reviews, and lifecycle activities.

• Administer user, group, role, application, and service‑principal changes.

• Configure and support SSO, MFA, federation, Conditional Access, and identity integrations.

• Support access governance campaigns, entitlement reviews, and compliance requirements.

• Monitor platform health and resolve authentication, synchronization, and identity‑related issues.

• Coordinate platform upgrades, vulnerability remediation, and configuration improvements.

• Maintain audit evidence and documentation supporting compliance reviews.

• Drive automation and process improvements to enhance efficiency and reduce risk.

Required skills and experience

• Hands‑on experience with enterprise PAM solutions and privileged account administration.

• Strong understanding of identity management, directories, federation, SSO, MFA, RBAC, and application identity.

• Experience administering Microsoft Entra ID or comparable identity platforms.

• Experience working within ITSM, access control, change management, audit, and governance processes.

• Strong troubleshooting skills across authentication, identity, connector, and certificate‑related technologies.

• Ability to support planned after‑hours activities and major incidents.

Preferred skills and experience

• Experience with CyberArk, SailPoint, Entra ID, ADFS, or similar IAM technologies.

• Experience with identity automation using PowerShell, Python, APIs, or workflow tools.

• Experience supporting regulated or managed services environments.

• Relevant Microsoft, CyberArk, SailPoint, security, cloud, or service‑management certifications.

• Experience integrating IAM platforms with SIEM and enterprise observability platforms

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid‑friendly culture that supports your well‑being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in‑demand skills to grow your career and achieve your ambitions with access to cutting‑edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands‑on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.

We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.

At Kyndryl, we achieve progress the world depends on, with purpose. Beginning with the purpose that matters to you . Because here, you will be part of a culture designed with purpose. One that is restless, empathetic and devoted. Where we are committed to sustainable progress for our customers and supporting the communities where we work and live. All of you is what we want. And what we need. Join us, and together, we can advance the vital systems that power human progress.

Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.