T&T - Consultant - Cyber Digital Trust & Privacy - TH

• Project Leadership: Lead and support IAM initiatives with a strong emphasis on Identity Governance & Administration (IGA) solutions across cloud and on-premises environments. Drive secure integration practices during application onboarding and ensure alignment with enterprise identity architecture and compliance requirements.
• Client Collaboration: Engage with client stakeholders to understand application landscapes, assess existing access governance frameworks, and define onboarding strategies. Provide guidance on improving user experience, access governance, and security effectiveness through implementation of IGA solutions.
• Subject Matter Expertise: Serve as a trusted advisor on IAM practices, with demonstrated experience in:
• SailPoint or equivalent IGA solutions.
• Application onboarding and integration best practices
• Identity lifecycle and access governance principles
• Federation technologies (e.g., SAML, OAuth2.0, OIDC, WS-Fed)
• Authentication policies, MFA enforcement, and session security
• Troubleshooting identity-related issues across complex environments
• Configuration and Deployment: Support the design, configuration, and deployment of Identity Governance & Administration (IGA) solutions across a range of enterprise and SaaS applications. Ensure integrations follow identity security best practices and align with standards such as Zero Trust and least privilege access.
• Application Onboarding: Work closely with application owners, developers, and platform teams to onboard applications into the organization's IGA platform (SailPoint). Assist in defining identity lifecycle flows, access requests, access certifications, Segregation of Duties (SoD) policies, and performing validation and testing.
• Project Delivery: Contribute to the successful delivery of IGA projects by maintaining accurate documentation, supporting stakeholder communications, tracking progress, and identifying technical or operational risks early. Collaborate with senior engineers and architects to troubleshoot and resolve issues during integration.
• Team Collaboration: Work under the guidance of senior IAM professionals and project leads, supporting initiatives across multiple clients or business units. Actively participate in internal knowledge sharing, reusable asset development, and improvement of onboarding playbooks and frameworks.

• Demonstrate a strong commitment to personal learning and development.
• Understand how our daily work contributes to the priorities of the team and business.
• Understand the set expectations and demonstrate accountability in keeping personal performance on track.
• Actively focus on developing effective communications and relationship-building skills with stakeholders, clients and team.
• Demonstrate an appreciation for working with others.
• Understand what is fundamental to Deloitte’s success as a business.
• Demonstrate integrity and an awareness of strengths, differences, and personal impact.
• Develop their understanding of Deloitte and offer a fresh perspective.

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field;
• Minimum 4 years of experience in Identity and Access Management (IAM) with a strong focus on SailPoint or IGA solutions
• Minimum 4 years of hands-on experience with SSO platforms such as PingFederate, Azure Active Directory (Entra ID), or ADFS, including configuring authentication protocols like SAML 2.0, OAuth 2.0, and OpenID Connect.
• Willingness and ability to travel, based on client and project requirements across Southeast Asia.
• Reliable team player, with a track record of contributing to successful project delivery by collaborating effectively with cross-functional teams and supporting senior colleagues in meeting project goals.
• Strong communication skills, with the ability to convey technical information clearly, engage with stakeholders professionally, and produce well-structured documentation and reports.
• A structured thinker with strong analytical and problem-solving skills, capable of navigating technical and business complexities with clarity.
• Relevant certifications e.g. SailPoint Certified Identity Security Engineer are a plus