We are seeking an experienced IAM Specialist to support and enhance the organisation's Identity and Access Management (IAM) capabilities across a complex enterprise environment. This role will be responsible for managing identity governance, user lifecycle management, authentication services, and access controls to ensure secure, compliant, and efficient access to business-critical systems and applications.

This role will require strong expertise in Forgerock Identity Platform, with hands-on experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, access management, and identity lifecycle processes. In addition, the role requires experience integrating enterprise applications, cloud platforms, and directory services while maintaining robust identity security controls and regulatory compliance standards.

Responsibilities of the Role

• Administer, support, and enhance the organisation's Identity and Access Management platforms and services.
• Manage end-to-end identity lifecycle processes, including Joiner, Mover, and Leaver (JML) activities.
• Design, implement, and support authentication and authorization solutions using ForgeRock technologies.
• Build and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation capabilities.
• Configure and maintain Role-Based Access Control (RBAC) models and access governance frameworks.
• Integrate internal and third-party applications with IAM platforms using industry-standard authentication protocols.
• Support user provisioning, deprovisioning, and entitlement management across enterprise applications.
• Conduct periodic access reviews, certification exercises, and segregation of duties assessments.
• Collaborate with application owners and business stakeholders to define access requirements and entitlement models.
• Support Privileged Access Management (PAM) initiatives and access governance controls.
• Investigate and resolve identity, authentication, and access-related incidents and technical issues.
• Participate in IAM transformation projects, platform upgrades, and security enhancement initiatives.
• Develop and maintain IAM operational procedures, standards, and technical documentation.
• Work closely with Cyber Security and Audit teams to ensure compliance with regulatory and security requirements.
• Drive automation and process improvement initiatives to improve efficiency and user experience.

Required Skills for the Role

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related discipline.
• Minimum 6 years of experience in Identity & Access Management, Identity Security, Cyber Security, or related disciplines.
• Proven hands-on experience administering and supporting ForgeRock IAM solutions in an enterprise environment.
• Experience integrating IAM platforms with cloud services, enterprise applications, and directory services.
• Experience within large-scale enterprise, financial services, insurance, telecommunications, or regulated environments is highly preferred.
• Professional certifications related to IAM, Cyber Security, ForgeRock, or Cloud technologies would be advantageous.
• Excellent English communication skills, Cantonese or Putonghua would be an advantage