User Access Management Support Engineer_Contract_666

Job description

Position Summary

The User Access Management Engineer at Allianz Technology Malaysia, Regional Delivery Center (RDC) is responsible to manage day to day operations of User Access Management (UAM) with processes execution, documentation, and workflows monitoring with staff performing UAM and human resource related duties, and complete tasks assigned within service level agreement (SLA). 

Key Responsibilities

• Deploy, configure, and maintain IAM solutions (OneIdentity Or SailPoint) for our customers but not limited to IAM 
  platforms, SSO and MFA. 
• Preform regular reviews and updates to ensure the ongoing efficiency of deployed IAM solutions.
• Administration of IAM solutions, encompassing the incorporation of new services within multi-cloud environments.
  
• Experience in working ITIL environment and responding & execution to requests within SLA.
• Have implemented Identity in one of - IAM solutions (OneIdenity / Ping / Okta / ForgeRock/SailPoint)
• Microsystems / Oracle IAM / NetIQ / Tivoli etc). Ideally, knows a bit about SCIM, but not essential.
• Keep up to date about industry best practices and emerging trends in IAM, ensuring the organization remains at the 
  forefront of security standards.
• Collaborate with the team to design, enforce & implement enhancements and updates to stay ahead of evolving IAM 
  related security threats and IAM technology advancements based on IT security framework aligned with group & 
  Operating Entities’ regulator standard & guideline. Leading, participating and completing various IT Security project 
  implementations and issues when needed.
• Perform periodic User Access Review (UAR).
• Any other duties when deemed necessary. Completing projects on various issues when needed.

Job Requirements

• Understanding of Identity and Access Management principles and practices.
• 1-3 years’ experience using one of the following IAM platforms -OneIdenity OR SailPoint.
• Demonstrated experience with Identity/IAM tools such as OneId Job servers (or any of the Ping tools) is preferred.
• Practical experience with OAUTH and SAML.
• Knowledge of federation standards, including SAML 2.0, OAuth 2.0, OpenID Connect. Experience in AD scripting and PowerShell commands is an added advantage.
• Previous .NET programmers would be highly regarded.
• Effective communication and excellent problem-solving skills.
• Experience in handing AD tools like Active Directory, LDAP, Azure AD and Computers (ADUC), AD Sites and Services (ADSS), AD Domain Services (ADDS), Domain Name System, Group Policy Object (GPO).
• Possess a Degree in IT field, certification in Information Technology Infrastructure Library (ITIL), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP) would be an added advantage.