IAM Analyst
Contract Duration: 1 years (12 Months)
Work Location: Toh Payoh, Singapore
Work Timing: Office Hours
Max Offered Salary: 6000 SGD
Role Summary
We are seeking a skilled and proactive IAM Analyst to support the design, implementation, and maintenance of Identity and Access Management (IAM) solutions across enterprise ICT systems and cloud platforms. The ideal candidate will play a key role in securing user identities, automating access lifecycle management, enforcing governance controls, and ensuring compliance with organizational and regulatory standards.
Key Responsibilities
IAM Administration & Platform Management
- Design, implement, configure, and maintain IAM and IGA solutions such as SailPoint, Saviynt, Okta, and Microsoft Entra ID.
- Support cloud-native identity and authentication services across enterprise environments.
User Lifecycle Management
- Develop and maintain automated Joiner-Mover-Leaver (JML) workflows for onboarding, transfers, and offboarding.
- Ensure timely provisioning, modification, and deprovisioning of user access rights.
Access Governance & Compliance
- Conduct periodic access reviews, certifications, and user attestation campaigns.
- Perform Segregation of Duties (SOD) analysis and enforce least-privilege access principles.
- Support audit and compliance activities by providing access evidence and documentation.
Privileged Access Management (PAM)
- Implement and manage PAM controls using tools such as CyberArk or BeyondTrust.
- Monitor privileged accounts, credential vaulting, and Just-In-Time (JIT) access mechanisms.
Identity Federation & SSO
- Configure and troubleshoot Single Sign-On (SSO) and identity federation integrations.
- Work with protocols including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
Directory & Authentication Services
- Manage and optimize Active Directory, LDAP, Azure AD / Entra ID, and Azure AD Connect.
- Configure Conditional Access policies, MFA, and passwordless authentication solutions.
Automation & Integration
- Develop scripts and automation using PowerShell, Python, Bash, or Java.
- Build custom connectors and integrate legacy systems with IAM platforms.
Security Monitoring & Incident Support
- Monitor IAM-related logs and alerts for suspicious activities and identity threats.
- Assist in investigation and response to access-related security incidents.
Stakeholder Collaboration
- Work closely with HR, IT Operations, Security, and Application Owners to define RBAC and ABAC models.
- Document IAM processes, workflows, and technical configurations clearly.
Continuous Improvement
- Evaluate emerging identity technologies and Zero Trust security practices.
- Support implementation of modern identity capabilities including ITDR and decentralized identity concepts
Required Skills & Qualifications
Technical Skills
- Minimum 2 years of experience in IAM engineering, administration, or analysis.
- Hands-on experience with IAM/IGA tools such as SailPoint, Saviynt, Okta, and Microsoft Entra ID.
- Strong understanding of:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- SCIM
- Experience with Active Directory, LDAP, Azure AD Connect, and identity synchronization.
- Familiarity with PAM solutions and privileged access controls.
- Knowledge of cloud security concepts, AWS IAM, Azure Policy, and Zero Trust Architecture.
- Experience with automation scripting using PowerShell, Python, or Bash.
- Exposure to Infrastructure as Code tools such as Terraform or Bicep is an advantage.
Compliance & Governance
- Understanding of regulatory and compliance requirements such as GDPR, PDPA, and GCC security standards.
Certifications (Preferred)
- Microsoft SC-300
- Okta Certified Professional
- CISSP
- CIAM / CAMS certifications
Soft Skills
- Strong analytical and troubleshooting abilities.
- Good communication and documentation skills.
- Ability to work collaboratively in cross-functional teams.
Education
- Degree or Diploma in Computer Science, Information Technology, Cybersecurity, or related field.
Interested candidates can connect on +6586533349 (WhatsApp chat only)
