Identity and Access Management Engineer

NexTbil Tech

. Administer joiner, mover, and leaver processes in alignment with HR systems, back-office systems, and IAM policies .

Posted 9/24/2026contractRemote • MalaysiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) processes, including user provisioning, access control, and compliance auditing. Proficient in managing IAM platforms and integrating with cloud services while ensuring adherence to security policies and best practices.

Highest-signal resume keywords

Identity And Access Management (IAM)Active DirectoryPIM/PAM SolutionsMFA ImplementationDLP And CASB Technologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

User ProvisioningAccess ControlIdentity GovernanceRisk AnalysisAccess Management AutomationSAMLOAuthOIDCIP WhitelistingDirectory Services

Soft Skills

Analytical SkillsAttention To DetailCommunication SkillsCollaborative MindsetAccountability

Tools & Technologies

Microsoft Entra IDAzure ADOktaCyberArkBeyondTrustProofpointAWSAzureGitHubIntune

Certifications & Qualifications

CISSPCISMMicrosoft Certified: Identity And Access AdministratorCyberArk Defender

Industry Keywords

Zero Trust ArchitectureISO 27001PCI DSSGDPRRegulatory Compliance

Tech Stack

Tools & technologies

AWSAzureCloudPython

About the role

Key responsibilities & impact

Administer joiner, mover, and leaver processes in alignment with HR systems, back-office systems, and IAM policies
Provision, modify, and deprovision user, service, and privileged accounts across directories and integrated applications
Maintain accurate identity attributes according to corporate IAM and HR policies
Administer accounts, roles, and permissions across enterprise systems, cloud environments, and product back-office platforms
Implement and maintain least privilege, RBAC, and just-in-time access policies
Review and audit user access for internal and regulatory compliance
Coordinate onboarding and offboarding with HR and IT teams
Integrate IAM systems with HRIS, directory services, and cloud identity providers
Manage IP whitelisting for product providers, payment gateways, and business-critical systems
Maintain documentation and governance of IP access rules
Collaborate with network and application teams to troubleshoot and validate connectivity
Manage PIM/PAM solutions to protect privileged credentials and monitor administrative access
Enforce session recording, password rotation, and MFA for privileged accounts
Conduct privileged account reviews and remediate access issues
Monitor access and data movement using DLP and CASB tools
Investigate and respond to unauthorized data access or transfer alerts
Define and enforce data classification and protection policies
Support IAM integrations with SaaS platforms, Microsoft 365, Intune, collaboration tools, and third-party applications
Troubleshoot authentication, SSO, MFA, and access issues
Participate in IAM projects, including onboarding the new back-office system, enhancements, and tenant improvements
Maintain IAM processes, standards, documentation, and access matrices
Ensure IAM configurations comply with security policies, audit requirements, and hardening standards
Identify and remediate access violations, orphaned accounts, and policy deviations
Support internal and external audits with access evidence and compliance reports
Drive IAM process improvements and automation

Requirements

What you’ll need

Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent practical experience)
Strong knowledge of Active Directory, Azure AD, Okta, or similar IAM platforms
Experience with PIM/PAM solutions, such as CyberArk, BeyondTrust, or Azure PIM
Familiarity with DLP and CASB technologies, such as Proofpoint
Understanding of SAML, OAuth, OIDC, and MFA
Experience managing IP whitelisting and firewall access controls in cloud and hybrid environments
5 to 7 years of hands-on experience in Identity and Access Management or related security disciplines
Proficiency in Microsoft Entra ID (Azure AD), Conditional Access, and identity protection features
Knowledge of directory services, such as Active Directory and LDAP
Familiarity with identity governance and administration practices
Ability to analyze access risks and implement appropriate controls
Strong analytical and troubleshooting skills
Understanding of Zero Trust architecture and security best practices
High attention to detail and strong sense of accountability
Excellent communication and documentation skills
Ability to handle sensitive and confidential access information
Detail-oriented and process-driven approach
Collaborative mindset across technical and business teams
High integrity and commitment to confidentiality and compliance
Experience integrating IAM with CSPs such as AWS, Azure, or AliCloud, or tools such as GitHub
Working knowledge of Python, PowerShell, or Bash for access management automation
Familiarity with ISO 27001, PCI DSS, and GDPR
Industry certifications such as CISSP, CISM, Microsoft Certified: Identity and Access Administrator, or CyberArk Defender are preferred

Benefits

Comp & perks

Attractive salary package and performance-based bonuses
Flexible working options, including remote and hybrid working models
Comprehensive health insurance
Wellness initiatives and physical and mental well-being resources
Training programs and continuous learning
Mentorship
Clearly defined career development paths
Supportive, inclusive, and growth-focused environment
Team-building activities and social events
Competitive compensation and performance-based incentives
Medical insurance
Flexible and hybrid working models supporting work-life balance