T&T - Consultant - Cyber Digital Trust & Privacy - TH

About the Company

Service Line / Portfolios: Cyber. Location: Bangkok, TH. Deloitte seeks talented individuals driven to excel and innovate, working together to achieve shared goals and make an impact for clients, people and communities.

Responsibilities

• Lead and support Identity and Access Management (IAM) initiatives with emphasis on Identity Governance & Administration (IGA) solutions across cloud and on‑premises environments.
• Drive secure integration practices during application onboarding and ensure alignment with enterprise identity architecture, Zero Trust and compliance requirements.
• Engage with client stakeholders to understand application landscapes, assess access governance frameworks, and define onboarding strategies to improve user experience, access governance and security effectiveness.
• Serve as subject-matter expert on IAM practices and IGA platforms (e.g., SailPoint), including application onboarding, identity lifecycle, access governance, Segregation of Duties (SoD) policies, and troubleshooting identity-related issues.
• Work with SSO and federation technologies (SAML, OAuth 2.0, OpenID Connect, WS‑Fed) and authentication policies including MFA enforcement and session security.
• Support the design, configuration and deployment of IGA solutions for enterprise and SaaS applications, and validate integrations through testing and documentation.
• Contribute to project delivery by maintaining documentation, supporting stakeholder communications, tracking progress, identifying risks, and collaborating with senior engineers and architects to resolve issues.
• Participate in internal knowledge sharing, reusable asset development, and improvement of onboarding playbooks and frameworks.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering or related field.
• Minimum 4 years of experience in Identity and Access Management (IAM) with strong focus on SailPoint or other IGA solutions.
• Minimum 4 years hands-on experience with SSO platforms such as PingFederate, Azure Active Directory (Entra ID) or ADFS, including configuring SAML 2.0, OAuth 2.0 and OpenID Connect.
• Ability and willingness to travel based on client and project requirements across Southeast Asia.
• Reliable team player with a track record of contributing to successful project delivery and collaborating with cross-functional teams.
• Strong communication skills to convey technical information, engage stakeholders and produce well-structured documentation and reports.
• Structured thinker with strong analytical and problem-solving skills capable of navigating technical and business complexities.
• Relevant certifications (e.g., SailPoint Certified Identity Security Engineer) are a plus.

Additional Information

• Work arrangement: onsite.