Senior IDAM Services Engineer

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

The Senior IDAM Services Engineer will be responsible to support AIDA / ReAI and enterprise workloads that require secure machine-to-machine identity, secrets, certificates and automated access controls. The role will engineer secure integration patterns across applications, CI/CD pipelines, vaults, certificate lifecycle services and identity governance platforms.

Make an Impact by:

• Engineer and operate enterprise secrets-management patterns for AIDA / ReAI applications, AI agents, workloads, service identities and automation accounts.
  Integrate applications and CI/CD pipelines with approved vault and secrets-management services so credentials are retrieved at runtime and are not hard-coded in source code, scripts or configuration files.
• Implement automated secret rotation, credential expiry, revocation and recovery patterns, including application validation after rotation.
• Design vault integration patterns using APIs, workload identity, just-in-time retrieval and least-privilege access, with clear separation between human and non-human identities.
• Engineer certificate lifecycle automation covering request, issuance, deployment, renewal, replacement, revocation and expiry monitoring for supported application and workload certificates.
• Integrate applications with the enterprise Certificate Lifecycle Management platform and approved certificate authorities, eliminating manual certificate handling wherever technically feasible.
• Implement proactive monitoring and alerting for certificate expiry, failed renewal, failed deployment, secret-rotation failures and vault integration health to prevent service outages.
• Define audit logging requirements for secrets, certificates and non-human identities, and forward relevant security and operational events to enterprise SIEM/monitoring platforms.
• Support agentic AI identity governance by establishing unique identity, ownership, purpose, privilege, credential, lifecycle and traceability requirements for AI agents and autonomous workloads.
• Design and implement SailPoint integration models for agentic AI and non-human identities, including authoritative ownership, account correlation, access governance, certification/review, provisioning/deprovisioning and evidence reporting where appropriate.\
• Develop governance patterns that distinguish employee/contractor identity lifecycle from machine, workload and AI-agent identity lifecycle while maintaining consistent enterprise control outcomes.
• Integrate identity and secrets controls with cloud platforms, APIs, DevSecOps tooling and enterprise applications using REST APIs, web services, connectors and automation scripts.
• Perform security and operational readiness validation before production deployment, including failure scenarios, rollback/recovery, monitoring, support ownership and runbook readiness.
• Maintain architecture diagrams, integration specifications, SOPs, support runbooks, credential/certificate ownership records and audit evidence required for operational handover.
• Support incident investigation and root-cause analysis for secret exposure, authentication failures, certificate expiry, failed rotations and non-human identity access issues.
• Drive continuous improvement by identifying manual processes and recurring operational risks and replacing them with scalable, system-enforced automation.
• Work with Cyber Security, Data Governance, PKI, PAM, IDAM/SailPoint, Cloud and application teams to ensure solutions comply with Singtel security, audit and operational standards.
• Transfer knowledge to BAU teams and ensure new integrations are supportable before the end of the contract engagement.

Skills for Success:

• Degree or diploma in Computer Science, Cybersecurity, Information Technology, Engineering or equivalent practical experience.
• Minimally 8 years of hands-on engineering experience in two or more of: secrets management/PAM, PKI/certificate lifecycle, IAM/IGA, DevSecOps automation, cloud security or application security.
• Hands-on experience integrating applications or pipelines with enterprise vaults and automating credential retrieval/rotation.
• Practical PKI knowledge including CSR, certificate chains, TLS, issuance, renewal, revocation and automated deployment.
• Experience with REST APIs, scripting/automation and CI/CD integration.
• Experience implementing monitoring, audit logging and security-event forwarding for production services.
• Working knowledge of identity lifecycle, least privilege, RBAC and non-human/service identity controls.
• Secrets management and vault integration
• PKI and certificate lifecycle automation
• SailPoint / IGA integration and lifecycle governance
• REST API, Python/PowerShell or equivalent automation
• CI/CD and DevSecOps integration
• Monitoring, logging and operational readiness
• Strong problem solving and ownership; clear written and verbal communication; able to work across security, infrastructure, application and product teams; disciplined documentation and production-readiness mindset.
• Understanding of agentic AI security concepts, non-human identity governance, credentialless/workload identity patterns, certificate automation and audit evidence requirements.

Good to have:

• Relevant certifications in CyberArk, SailPoint, cloud security, PKI, DevSecOps or identity security.
• CyberArk Privilege Cloud / CCP / Conjur / Secrets Hub and CyberArk Certificate Lifecycle Management.
• SailPoint IdentityIQ or Identity Security Cloud integration experience.
• Azure/Entra ID, AWS or GCP workload identity and managed identity patterns.
• Experience governing AI agents, service principals, API identities or machine identities.
• Experience with AI/agent platforms, workload identity federation, SIEM integration and infrastructure-as-code.
• Able to explain complex identity/security risks in simple business terms and influence teams toward automation rather than manual controls.
• Familiarity with AI governance frameworks and secure-by-design patterns for autonomous agents and tool/API access.

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.

Take the leap with Singtel to shape what’s next and accelerate your growth.