IDM Engineer - Contract

Position Summary

Manage day to day operations of IT Security (IS) Identity Access Management (IAM) with processes execution, documentation, and workflows monitoring with staff performing IAM and human resource related duties, and complete tasks assigned within service level agreement (SLA).

Key Responsibilities

• Deploy, configure, and maintain IAM solutions (OneIdentity Or SailPoint) for our customers but not limited to IAM platforms, SSO and MFA. 
• Preform regular reviews and updates to ensure the ongoing efficiency of deployed IAM solutions.
• Administration of IAM solutions, encompassing the incorporation of new services within multi-cloud environments.
• Experience in working ITIL environment and responding & execution to requests within SLA.
• Have implemented Identity in one of - IAM solutions (OneIdenity / Ping / Okta / ForgeRock/SailPoint)
• Microsystems / Oracle IAM / NetIQ / Tivoli etc). Ideally, knows a bit about SCIM, but not essential.
• Keep up to date about industry best practices and emerging trends in IAM, ensuring the organization remains at the forefront of security standards.
• Collaborate with the team to design, enforce & implement enhancements and updates to stay ahead of evolving IAM related security threats and IAM technology advancements based on IT security framework aligned with group & Operating Entities’ regulator standard & guideline. Leading, participating and completing various IT Security project implementations and issues when needed.
• Perform periodic User Access Review (UAR).
• Any other duties when deemed necessary. Completing projects on various issues when needed.

Job Requirements

• Understanding of Identity and Access Management principles and practices
• 1-3 years’ experience using one of the following IAM platforms -OneIdenity OR SailPoint.
• Demonstrated experience with Identity/IAM tools such as OneId Job servers (or any of the Ping tools) is preferred.
• Practical experience with OAUTH and SAML
• Knowledge of federation standards, including SAML 2.0, OAuth 2.0, OpenID Connect. Experience in AD scripting and PowerShell commands is an added advantage.
• Previous .NET programmers would be highly regarded.
• Effective communication and excellent problem-solving skills.
• Experience in handing AD tools like Active Directory, LDAP, Azure AD and Computers (ADUC), AD Sites and Services (ADSS), AD Domain Services (ADDS), Domain Name System, Group Policy Object (GPO). 
• Possess a Degree in IT field, certification in Information Technology Infrastructure Library (ITIL), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP) would be an added advantage.
   

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. 
We at Allianz believe in a diverse and inclusive workforce and are proud to be an equal opportunity employer. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in.
We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation.
Join us. Let's care for tomorrow.