Total 167 quality assurance engineer job vacancies in Legal / Public / Security category in Hong Kong

Roles & Responsibilities:

• Manage security solution operations, company security tasks (security inspections, campaigns, etc.)
• Security inspection tasks for SDSAP
• Security inspections and security-related tasks are carried out according to the security inspection schedule designated by the team.
• Providing technical support if customers encounter issues while operating security solutions(DRM, In-house solution).
• At the data center, asset inventory and procurement process tasks for SDSAP and SEC must be performed.
• Security asset house-keeping
• Support electronic solution operations, require regular meetings with customers.

Requirements:

• Diploma or Degree in Information Security or Information System or equivalent
• At least 1 year of experience in programming (coding & algorithm)
• Experienced in Windows and Linux Servers
• Good knowledge about IT system
• Good interpersonal skills
• Passion in IT security and technology
• Team player with high initiative, self-motivation and results-oriented mind-set
• Experienced in complex secured network design, VPN and WLAN implementation.
• Good communication, documentation, organizational and interpersonal skills
• Experience with networking, system administration and infrastructure architecture
• An employee with a high level of passion for work and a desire to work together for a long time.
• Work location: 61 TAI SENG AVENUE PRINT MEDIA HUB @ PAYA LEBAR IPARK

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

Responsibilities

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security
• Conduct static code analysis to identify and triage application security issues
• Work closely with DevOps and engineering teams to remediate application
• security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC)
• Assist in application and infrastructure security reviews to identify gaps in best practices, and collaborate with stake holder teams to improve security posture 
• Perform reverse engineering and forensic analysis to identify security vulnerabilities and its exploitability
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation
• Fulfill on-call responsibilities for handling security-related incidents
• Leverage LLM technologies to create security testing and investigation tools
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration
• Knowledge of infrastructure security and physical security best practices
• Understanding of software development and secure coding best practices
• Ability to analyse complex problems, explore the greenfield and devise creative solutions
• CS/EEE with solid foundation of computer engineering
• Demonstrated up to 6 years of relevant experience

Preferred Qualifications

• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Strong team player with adaptability
• Knowledge in reverse engineering and exploit development, especially with hands-on 
• experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus

Apple is an equal opportunity employer that is committed to inclusion and diversity, and thus we treat all applicants fairly and equally. Apple is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

• Perform security assessments, identify risks and gaps, and recommend improvement plans.
• Support the design, evaluation, and deployment of cybersecurity solutions including EDR, SASE, Zero Trust, and endpoint/network security controls.
• Participate in proof-of-concept activities, vendor evaluations, technical workshops, and customer engagements.
• Prepare assessment reports, technical documentation, project deliverables, and presentations.
• Collaborate with customers, vendors, and internal teams to ensure successful project delivery.
• Keep up to date with cybersecurity trends, threats, and industry best practices.

Qualifications:

• Degree in Information Technology, Cybersecurity, Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of experience in cybersecurity, security engineering, security assessments, solution implementation, consulting, or related areas.
• Hands-on experience in security assessments, gap analysis, risk identification, and remediation planning.
• Experience engaging customers or stakeholders in advisory, consulting, or project delivery environments.
• Practical knowledge in one or more areas: EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to assess cybersecurity risks and provide practical, business-focused recommendations.
• Strong communication skills to present technical concepts effectively to both technical and non-technical audiences.
• Experience with Cato Cloud or comparable SASE platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, or similar standards.
• Understanding of firewalls, VPNs, routing, Active Directory, Microsoft 365 security, and cloud connectivity.
• Relevant certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or equivalent.

To apply, please visit www.gmprecruit.com and search for Job Reference: 3W36XV68

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

Our client, a well-known company is looking for candidates for the position of Senior Security Engineer.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical, actionable improvement and remediation plans.
• Support the design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint and network security controls.
• Engage in proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on emerging cybersecurity technologies, threats, and best practices to continuously improve service quality.

Key Requirements and Experience

• Degree in Information Technology, Cybersecurity, Computer Engineering, Computer Science, or a related field.
• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Hands-on experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.

Required Technical Skills

• Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to both technical and non-technical audiences.

Preferred Qualifications

• Experience with Cato Cloud or similar SASE platforms.
• Knowledge of security frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO/IEC 27001.
• Familiarity with network and infrastructure fundamentals such as firewalls, VPN, routing, Active Directory, Microsoft 365 security, or cloud connectivity.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or vendor certifications.

EA License No.: 01C4394 (PERSOL SINGAPORE PTE LTD)

Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Key Responsibilities

1. Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
2. Monitor network security events and investigate security alerts, incidents, and potential threats.
3. Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
4. Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
5. Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
6. Support the design and implementation of secure network architectures and infrastructure solutions.
7. Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
8. Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
9. Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
10. Support security incident response, root cause analysis, and remediation activities.
11. Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
12. Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

1. Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
2. Hands-on experience managing enterprise firewalls and security technologies.
3. Knowledge of network security principles, security monitoring, threat detection, and incident response.
4. Experience with vulnerability management and security hardening practices.
5. Ability to interpret security requirements and implement appropriate technical controls.
6. Strong analytical, troubleshooting, and problem-solving skills.
7. Excellent documentation and communication skills.

Qualifications

1. Bachelor’s degree in information technology, Computer Science, or a related field.
2. Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
3. Should have experience in Azure Cloud environment  

Required Certifications

1. CCNA or CCNP
2. PCNSA
3. AWS/Azure Certified

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
• Support design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint/network security controls.
• Support proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.

Requirements

• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.
• ⁠Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to technical and non-technical audiences.

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | VO UYEN AI LINH | Registration No: R22109232 

Roles & Responsibilities

1. The role will focus on project delivery and implementation for security related products across infrastructure and systems.
2. Will also perform configuration, testing and maintenance support for the security devices.
3. Experience in Information Security Risk Management, Vulnerability Management and Assessments.
4. Serve as the Technical Support expert and capable of handling escalations, incidents, outages and infrastructure challenges.
5. Operate, manage and support the IT infrastructure and services implemented to meet prescribed service levels
6. Ensure that project implementation and operations are aligned to client technology standards and policies

Qualifications:

1. Diploma / Degree in Computer Science, Computer or Electronics Engineering or Information Technology or related disciplines
2. Minimum 2 years of relevant IT experience in implementing and managing complex IT infrastructure systems and services for commercial and Singapore government agencies
3. CISSP/CCSP/CISM/CCSK certification or its equivalent is preferred
4. Possess good technical skills with working knowledge and experience on cybersecurity technologies and tools - PAM (CyberArk), DAM (IBM Guardium, Imperva SecureSphere DAM), SIEM (Splunk, IBM Qradar, Endpoint (Trend Micro, Carbon Black) and VA scanner
5. Familiar with IM8 policies
6. Excellent problem-solving and analytical skills

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

• Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
• Monitor network security events and investigate security alerts, incidents, and potential threats.
• Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
• Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
• Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
• Support the design and implementation of secure network architectures and infrastructure solutions.
• Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
• Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
• Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
• Support security incident response, root cause analysis, and remediation activities.
• Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
• Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

• Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
• Hands-on experience managing enterprise firewalls and security technologies.
• Knowledge of network security principles, security monitoring, threat detection, and incident response.
• Experience with vulnerability management and security hardening practices.
• Ability to interpret security requirements and implement appropriate technical controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent documentation and communication skills.

Qualifications

• Bachelor’s degree in information technology, Computer Science, or a related field.
• Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
• Should have experience in Azure Cloud environment  

Required Certifications

• CCNA or CCNP
• PCNSA
• AWS/Azure Certified

We are seeking a skilled Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities:

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance.

• Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization.

• Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings.

• Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements.

• Monitor security systems to detect unauthorized access and respond appropriately to threats.

• Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness.

• Research emerging security threats and propose effective mitigation strategies.

• Provide technical security advice to teams involved in infrastructure, applications, and business processes.

• Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics.

• Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors' queries.

Requirements:

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field.

• A minimum of 3 years of experience in an IT security role.

• Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities.

• Preferred certifications: CRISC, CISM, and/or CISSP.

• Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols.

• Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Responsibilities

• Install, configure, maintain, and troubleshoot electronic security systems including CCTV, Access Control Systems, Intrusion Detection Systems, Intercom Systems, and Visitor Management Systems.
• Support system integration, testing, commissioning, and handover of security solutions at customer sites.
• Design, configure, and maintain network infrastructure supporting security systems, including switches, routers, firewalls, VLANs, and wireless networks.
• Monitor security systems and network infrastructure to ensure optimal performance and system uptime.
• Perform preventive maintenance, system upgrades, firmware updates, and corrective maintenance for installed systems.
• Diagnose and resolve technical faults, alarms, and system failures in a timely manner.
• Support centralized security management platforms and monitoring systems.
• Ensure cybersecurity protection of security devices and networks through proper configuration and best practices.
• Coordinate with clients, vendors, and subcontractors for project execution, maintenance, and technical support.
• Conduct site surveys and support project implementation activities.
• Maintain accurate documentation including system configurations, network diagrams, maintenance reports, and service records.
• Provide technical support and training to customers and internal teams.
• Ensure compliance with company standards, safety requirements, and industry best practices.

Requirements

• Diploma or Degree in Electronics, Electrical Engineering, Information Technology, Computer Science, Telecommunications, or related field.
• Minimum 3–5 years of experience in electronic security systems, CCTV, Access Control, or related ELV/security industry.
• Good understanding of IP networking concepts such as TCP/IP, VLANs, routing, switching, and wireless networks.
• Hands-on experience with CCTV systems, Access Control Systems, Intrusion Detection Systems, and integrated security solutions.
• Familiarity with leading security platforms such as Hikvision, Axis, Milestone, Genetec, Bosch, Honeywell, or similar systems.
• Basic knowledge of network security principles, firewalls, VPNs, and cybersecurity best practices.
• Experience in system installation, configuration, testing, and commissioning.
• Ability to troubleshoot hardware, software, and network-related issues.
• Strong communication skills and ability to work with customers and project teams.
• Ability to work independently and handle site-based work and multiple projects.
• Willingness to work after office hours or attend emergency maintenance when required.
• Certifications such as CCNA, Security+, or vendor certifications in CCTV/access control systems will be an added advantage.

JD for System Engineer

Manage the day-to-day operations of client systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities. Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment. Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance. Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows. Monitor client systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly. Maintain accurate documentation of system configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

Support periodic access reviews and audits, identifying and remediating access risks in line with internal policies and regulatory requirements. Assist in tracking system related risks and remediation action plans, providing updates to relevant stakeholders. Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

Serve as the first point of contact for system -related issues and queries from users and IT teams, providing clear and timely resolution. Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs. Maintain service quality and operational consistency as the team transitions project-focused members to new system initiatives.

The IAM Operations Analyst is responsible for the day-to-day operation, administration, and support of the organization's Identity and Access Management (IAM) services. This role ensures that user and machine identities are managed securely and efficiently throughout their lifecycle while maintaining compliance with internal policies and regulatory requirements. The position works closely with IT, security, and business stakeholders to deliver reliable identity services, support access governance activities, and maintain a strong security posture across the enterprise.

Key Responsibilities

IAM Operations

• Manage the daily operation of IAM platforms, including user and machine identity provisioning, de-provisioning, modification, and lifecycle management.
• Administer and maintain Active Directory (AD) and LDAP directory services, ensuring the accuracy and integrity of identity data across the environment.
• Operate, support, and maintain One Identity solutions, including configuration, troubleshooting, issue resolution, and routine system maintenance.
• Process access requests in accordance with established policies, approval workflows, and service level expectations.
• Monitor IAM systems and services for operational issues, anomalies, policy violations, and potential security threats, escalating and resolving incidents as required.
• Maintain and update IAM documentation, including system configurations, operational procedures, access records, and support runbooks.
• Support system upgrades, patches, and ongoing improvements to IAM platforms and processes.

Access Governance & Compliance

• Support periodic access certification reviews and audit activities to ensure appropriate access rights are maintained across the organization.
• Identify, investigate, and remediate access-related risks and control gaps in alignment with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks, remediation activities, and action plans, providing regular updates to stakeholders.
• Generate and maintain reports on user access, identity lifecycle activities, policy compliance, and audit findings.
• Support evidence collection and documentation for internal and external audits.

Stakeholder Support & Service Delivery

• Act as the primary point of contact for IAM-related requests, incidents, and inquiries from users, application owners, and IT teams.
• Provide timely troubleshooting and resolution of IAM issues while maintaining a high level of customer service.
• Collaborate with IT infrastructure, cybersecurity, and application teams to ensure identity and access controls align with business and security requirements.
• Contribute to continuous service improvement initiatives, helping maintain operational stability while supporting ongoing IAM transformation projects.
• Ensure service quality, operational consistency, and knowledge transfer as resources transition between operational and project-based IAM initiatives.

Qualifications & Experience

Required

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Experience supporting Identity and Access Management operations in an enterprise environment.
• Hands-on experience with Active Directory, LDAP, and identity lifecycle management processes.
• Experience administering or supporting One Identity solutions or comparable IAM platforms.
• Understanding of access governance, role-based access control (RBAC), joiner-mover-leaver processes, and privileged access concepts.
• Knowledge of IT security principles, audit requirements, and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Preferred

• Experience with identity governance and administration (IGA) platforms.
• Familiarity with cloud identity services such as Microsoft Entra ID (Azure AD) or other cloud IAM technologies.
• Knowledge of ITIL service management practices.
• Relevant certifications such as Security+, ITIL Foundation, Microsoft Identity certifications, or IAM-related certifications.