{"id":4064138,"url":"https://alion.io/job/singtel-senior-idam-services-engineer","title":"Senior IDAM Services Engineer","company":{"id":49912,"name":"Singtel","domain":"singtel.com","url":"https://alion.io/company/singtel","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CyberArk","optional":true},{"name":"GCP","optional":true},{"name":"Microsoft Entra ID","optional":true}],"status":"live","first_seen_at":"2026-11-11T10:23:37Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T10:23:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Singtel is where Technology meets Purpose.\nWe're building an AI-first telco for the future-connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.\nFrom transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.\nAt Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.\nThis is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.\nBacked by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.\nBe a Part of Something BIG!\nThe Senior IDAM Services Engineer will be responsible to support AIDA / ReAI and enterprise workloads that require secure machine-to-machine identity, secrets, certificates and automated access controls. The role will engineer secure integration patterns across applications, CI/CD pipelines, vaults, certificate lifecycle services and identity governance platforms.\nMake an Impact by:\nEngineer and operate enterprise secrets-management patterns for AIDA / ReAI applications, AI agents, workloads, service identities and automation accounts.Integrate applications and CI/CD pipelines with approved vault and secrets-management services so credentials are retrieved at runtime and are not hard-coded in source code, scripts or configuration files.\n\nImplement automated secret rotation, credential expiry, revocation and recovery patterns, including application validation after rotation.\nDesign vault integration patterns using APIs, workload identity, just-in-time retrieval and least-privilege access, with clear separation between human and non-human identities.\nEngineer certificate lifecycle automation covering request, issuance, deployment, renewal, replacement, revocation and expiry monitoring for supported application and workload certificates.\nIntegrate applications with the enterprise Certificate Lifecycle Management platform and approved certificate authorities, eliminating manual certificate handling wherever technically feasible.\nImplement proactive monitoring and alerting for certificate expiry, failed renewal, failed deployment, secret-rotation failures and vault integration health to prevent service outages.\nDefine audit logging requirements for secrets, certificates and non-human identities, and forward relevant security and operational events to enterprise SIEM/monitoring platforms.\nSupport agentic AI identity governance by establishing unique identity, ownership, purpose, privilege, credential, lifecycle and traceability requirements for AI agents and autonomous workloads.\nDesign and implement SailPoint integration models for agentic AI and non-human identities, including authoritative ownership, account correlation, access governance, certification/review, provisioning/deprovisioning and evidence reporting where appropriate.\nDevelop governance patterns that distinguish employee/contractor identity lifecycle from machine, workload and AI-agent identity lifecycle while maintaining consistent enterprise control outcomes.\nIntegrate identity and secrets controls with cloud platforms, APIs, DevSecOps tooling and enterprise applications using REST APIs, web services, connectors and automation scripts.\nPerform security and operational readiness validation before production deployment, including failure scenarios, rollback/recovery, monitoring, support ownership and runbook readiness.\nMaintain architecture diagrams, integration specifications, SOPs, support runbooks, credential/certificate ownership records and audit evidence required for operational handover.\nSupport incident investigation and root-cause analysis for secret exposure, authentication failures, certificate expiry, failed rotations and non-human identity access issues.\nDrive continuous improvement by identifying manual processes and recurring operational risks and replacing them with scalable, system-enforced automation.\nWork with Cyber Security, Data Governance, PKI, PAM, IDAM/SailPoint, Cloud and application teams to ensure solutions comply with Singtel security, audit and operational standards.\nTransfer knowledge to BAU teams and ensure new integrations are supportable before the end of the contract engagement.\nSkills for Success:\nDegree or diploma in Computer Science, Cybersecurity, Information Technology, Engineering or equivalent practical experience.\nMinimally 8 years of hands-on engineering experience in two or more of: secrets management/PAM, PKI/certificate lifecycle, IAM/IGA, DevSecOps automation, cloud security or application security.\nHands-on experience integrating applications or pipelines with enterprise vaults and automating credential retrieval/rotation.\nPractical PKI knowledge including CSR, certificate chains, TLS, issuance, renewal, revocation and automated deployment.\nExperience with REST APIs, scripting/automation and CI/CD integration.\nExperience implementing monitoring, audit logging and security-event forwarding for production services.\nWorking knowledge of identity lifecycle, least privilege, RBAC and non-human/service identity controls.\nSecrets management and vault integration\nPKI and certificate lifecycle automation\nSailPoint / IGA integration and lifecycle governance\nREST API, Python/PowerShell or equivalent automation\nCI/CD and DevSecOps integration\nMonitoring, logging and operational readiness\nStrong problem solving and ownership; clear written and verbal communication; able to work across security, infrastructure, application and product teams; disciplined documentation and production-readiness mindset.\nUnderstanding of agentic AI security concepts, non-human identity governance, credentialless/workload identity patterns, certificate automation and audit evidence requirements.\nGood to have:\nRelevant certifications in CyberArk, SailPoint, cloud security, PKI, DevSecOps or identity security.\nCyberArk Privilege Cloud / CCP / Conjur / Secrets Hub and CyberArk Certificate Lifecycle Management.\nSailPoint IdentityIQ or Identity Security Cloud integration experience.\nAzure/Entra ID, AWS or GCP workload identity and managed identity patterns.\nExperience governing AI agents, service principals, API identities or machine identities.\nExperience with AI/agent platforms, workload identity federation, SIEM integration and infrastructure-as-code.\nAble to explain complex identity/security risks in simple business terms and influence teams toward automation rather than manual controls.\nFamiliarity with AI governance frameworks and secure-by-design patterns for autonomous agents and tool/API access.\nAre you ready to say hello to BIG Possibilities?\nJoin Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.\nTake the leap with Singtel to shape what’s next and accelerate your growth.","description_format":"text","description_chars":7525,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Mobile Networks","Broadband"],"lifecycle":[{"event":"open","at":"2026-11-11T10:23:37Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-11T11:00:39Z"},"pay":null,"html_url":"https://alion.io/job/singtel-senior-idam-services-engineer","json_url":"https://alion.io/job/singtel-senior-idam-services-engineer.json","meta":{"generated_at":"2026-11-11T11:00:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19057,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49912},"rest":"https://alion.io/mcp/rest/get_company?id=49912"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsingtel-senior-idam-services-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsingtel-senior-idam-services-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsingtel-senior-idam-services-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/singtel-senior-idam-services-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsingtel-senior-idam-services-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4064138}},{"tool":"search_jobs","arguments":{"company":"singtel.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4064138},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}