IT Access Management Engineer

U3 PROJECTS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

U3 PROJECTS PTE. LTD. seeks an experienced IAM specialist to design, implement, and customize identity and access management solutions across on-prem and cloud workloads.

You will work with OKTA, ForgeRock, or PING Identity, covering SAML, OAuth, OpenID, SCIM, LDAP, and MFA mechanisms. The ideal candidate will bring hands-on scripting skills, DevOps/DevSecOps experience, and a strong ability to document designs and SOPs for operations teams.

Qualifications

• Hands-on design, implementation, and customization of IAM solutions like OKTA, ForgeRock, or PING Identity.
• Strong knowledge of authentication/authorization across on-prem and cloud workloads.
• Experience with SAML, OAuth, OpenID, SCIM, LDAP, and MFA mechanisms.
• Scripting skills (VBScript, PowerShell, Perl, JavaScript) and REST/JSON.
• Experience with DevOps/DevSecOps, CI/CD, IaC, and IAM in AWS/Azure.
• Migration experience between IAM tools is preferred.
• Ability to document design and SOPs and transfer knowledge to operations.

Responsibilities

• Document solution design and Standard Operating Procedures.
• Provide knowledge transition to operations and support teams.
• Guide the support team in resolving technical issues and incidents.
• Demonstrate Agile mindset, fast learner, and adaptability.
• Collaborate with teams as a strong analytical problem-solver.

Skills

Access management

OKTA

ForgeRock

PING Identity

Authentication concepts

Cloud IAM

SAML

OAuth

OpenID

SCIM

LDAP

MFA mechanisms

Scripting

REST APIs

DevOps

IaC

AWS IAM

Azure IAM

Documentation

Incident guidance

Agile

Teamwork

Analytical skills

Problem solving

Tools

CI/CD tools

Containers

IAM tooling

Job description

• Strong hands-on experience in technical design, implementation, and customization with Access management Solutions like OKTA, ForgeRock, and/or PING Identity.
• Strong understanding of Authentication and Authorization concepts including technical design and implementations covering on-premises workload for applications and infrastructure, as well as Cloud computing workload on Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS)models.
• Working knowledge of current IAM standards and protocols, including but not limited to SAML, OAuth, OpenID, SCIM and LDAP, as well as MFA mechanisms.
• Scripting and coding skills with languages like VBScript, PowerShell, Perl, JavaScript, etc. and good understanding of REST API's and JSON.
• Good knowledge of DevOps/DevSecOps and CI/CD tools, including IaC (Infrastructure as Code), application containers, as well as IAM (Identity and Access Management) in AWS and Azure.
• Migration experience from one tool to another is preferred.
• Ability to document solution design, Standard Operating Procedures, and provide knowledge transition to operations and support teams.
• Able to provide guidance to support team on resolving technical issues and incidents.
• Agile, fast learner, and able to adapt to changes.
• Good team player, with strong analytical skills and enjoy complex problem-solving.