Cyber Security Consultant - Identity & Access Management (SailPoint/Ping Identity)
BGC GROUP PTE. LTD. Cyber Security Consultant - Identity & Access Management (SailPoint/Ping Identity)
Shape the identity security backbone of enterprise organisations
We're hiring an IAM Consultant who can move fluidly between whiteboard and workflow config — someone who enjoys translating messy business requirements into clean, secure, scalable identity solutions, and who's just as comfortable in a stakeholder workshop as they are deep in a SailPoint rule editor.
What you'll actually be doing
Design work that matters. You'll sit with customers and technical teams to unpack what they actually need — not just what they asked for — and turn that into solid IAM architecture: lifecycle management, access governance, authentication flows, and privileged access strategy.
Build and configure the platforms.
- SailPoint (Identity Security Cloud and/or IdentityIQ) — provisioning, joiner-mover-leaver automation, certifications, RBAC, connector and workflow customisation
- Ping Identity (PingAM + PingDS) — authentication journeys, directory services, SSO/federation via SAML, OAuth 2.0, and OIDC
Own delivery end to end. From the first requirements workshop through go-live and beyond — design, build, test, deploy, document, and hand over — you'll be a real owner of your workstream, not just a ticket-closer.
Keep things running. Post go-live, you'll provide L2/L3 support, chase down root causes, patch and upgrade systems, and keep pushing for a more stable, more secure environment.
Stay sharp. Bring a security-first mindset to everything, flag risks before they become incidents, and help build reusable methods and accelerators that make the next project faster.
What you bring
- A degree in Cybersecurity, Computer Science, IT, Engineering, or similar
- 3–6 years in cybersecurity / IAM / security engineering
- Real hands-on delivery experience with SailPoint (ISC and/or IIQ) and Ping Identity (PingAM/PingDS)
- Solid grasp of identity lifecycle management, access certification, RBAC, SSO, federation, and directory services
- Comfort working with SAML, OAuth 2.0, OpenID Connect, and LDAP
- A track record of integrating IAM platforms into real enterprise environments — apps, databases, directories, the works
- Strong troubleshooting instincts and the communication skills to explain your thinking to both engineers and executives