全职 Lead IAM Engineer 工作, 薪水, Horizontal Talent Selangor 公司招聘中 - Ricebowl

About Horizontal Talent

Horizontal Talent is a US-based recruitment and staffing company specialising in IT, Technology, Digital, Engineering, and professional talent solutions. We partner with organisations across various industries to connect them with skilled professionals who support business growth, innovation, and digital transformation.

We are currently assisting a leading multinational organisation in the recruitment of an experienced Lead IAM Engineer to strengthen its enterprise cybersecurity and Identity & Access Management capabilities.

About The Role

We are seeking an experienced Lead IAM Engineer to provide senior technical leadership in the design, implementation, integration, and support of enterprise Identity and Access Management (IAM) solutions.

This role combines hands-on engineering expertise with technical leadership, focusing on identity governance, access management, security controls, and automation. You will lead complex IAM initiatives, troubleshoot critical technical issues, establish engineering standards, and support the development of a centralised Enterprise IAM operating model across the organisation.

Key Responsibilities

• IAM Engineering: Lead the design, implementation, testing, integration, and maintenance of Identity Governance and Administration (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.
• Technical Leadership: Provide technical direction for IAM engineering initiatives, guide architectural decisions, and ensure alignment with enterprise security standards.
• Project Delivery: Lead technical workstreams from planning through implementation within Agile/Scrum environments, ensuring timely and quality delivery.
• Advanced Troubleshooting: Act as the Tier 3 escalation point for complex IAM incidents, perform root cause analysis, and implement permanent corrective actions.
• Automation: Develop scripts and automation solutions using Python and PowerShell to improve identity provisioning, cloud access management, and operational efficiency.
• Identity Governance & Compliance: Define and implement Segregation of Duties (SoD) policies, access controls, role design standards, and entitlement management processes.
• Risk Management & Audit: Implement risk-based IAM controls, support internal and external audits, and drive remediation of access governance and compliance findings.
• Architecture & Integration: Ensure IAM solutions integrate effectively with enterprise applications, cloud platforms, directory services, and security monitoring systems.
• Mentorship & Documentation: Provide technical guidance to engineering teams and maintain technical documentation, solution designs, architecture diagrams, and operational runbooks.
  
  

Requirements

• Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, or a related discipline.
• 8–12+ years of hands-on experience in Identity and Access Management design, implementation, and support.
• Proven experience delivering enterprise IAM solutions in complex, global environments with established access governance controls.
• Strong practical experience with Identity Governance platforms such as SailPoint, Saviynt, or One Identity.
• Experience with access management and SSO solutions such as Ping Identity, Okta, or Microsoft Entra ID.
• Strong knowledge of Active Directory, LDAP, cloud identity security, and platforms such as Microsoft Azure or AWS.
• Experience with Python or PowerShell scripting and automation.
• Solid understanding of role-based access control (RBAC), attribute-based access control (ABAC), Segregation of Duties (SoD), access provisioning, and privileged access management.
• Experience with advanced incident troubleshooting, root cause analysis, and technical escalation.
• Proven ability to lead technical initiatives, mentor engineers, and collaborate with cybersecurity, enterprise architecture, infrastructure, application, and risk teams.
• Experience with SAP or other enterprise application integrations is an advantage.