Role Overview:

We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.

Key Responsibilities:

• Okta Identity Governance (OIG) & Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
• Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
• Design access certification campaigns and remediation workflows to satisfy audit requirements.
• Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
• Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
• Automation & Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
• Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
• Governance, Risk & Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
• Ensure identity controls are measurable, auditable, and enforced consistently.

Required Skills & Experience:

• 6+ years of hands-on experience operating Okta in a production environment.
• Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
• Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
• Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.

Get to Know Our Team – Security & Resilience at Agoda

At Agoda, our Security & Resilience Department plays a critical role in safeguarding the organization. We oversee security, governance, risk management, compliance, and security operations—alongside business resilience capabilities including Business Continuity Management (BCM), Disaster Recovery (DR), and Crisis Management.

Our mission is to ensure Agoda can prevent, withstand, and recover from disruptions, whether cyber, operational, or external, while protecting our people, customers, and business.

As the security and resilience landscape evolves at an incredible pace, we pride ourselves on being early adopters of emerging technologies and innovative solutions. If you’re passionate about working with cutting-edge tools in a fast-moving, dynamic environment, this is an exciting challenge to take on.

The Opportunity

We are looking for a dedicated GRC (Governance, Risk Management & Compliance) Specialist/Sr. Specialist to join our team.

In this role, you will collaborate closely with internal stakeholders to manage Information Security, Compliance, and Resilience risks. You’ll contribute across multiple areas including risk management, business continuity, disaster recovery, and broader GRC initiatives.

We’re seeking someone who is an independent, proactive thinker, a strong stakeholder manager, and a natural team player.

This position is open to both local and international candidates, with relocation support available for eligible candidates to ensure a smooth transition to living and working in Bangkok.

In This Role, You Will:

• Apply strong knowledge of Risk Management, GRC functions, IT General Controls (ITGC), and industry frameworks (e.g., NIST CSF, PCI DSS, and other leading standards)
• Contribute to Business Continuity Planning (BCP), Disaster Recovery (DR), and Crisis Management programs, ensuring alignment with business and regulatory requirements
• Support Business Impact Analyses (BIAs) and help map critical functions, systems, and dependencies
• Continuously assess risks and ensure IT policies, procedures, and standards are effectively embedded into daily operations
• Deliver high-quality work in a dynamic environment with minimal supervision
• Partner with internal teams to enhance and mature security and resilience controls
• Track and ensure timely remediation of audit and risk assessment findings—never missing a deadline
• Proactively identify gaps and recommend improvements through strong written and verbal communication

What You’ll Need to Succeed:

• Bachelor’s degree in Business, Computer Information Systems, Computer Science, Information Systems Management, or equivalent experience
• At least 2–4 years of experience in a technology role, preferably within a security or resilience environment
• Strong understanding of international Information Security standards and frameworks
• Familiarity with BCM, DR, or Crisis Management concepts is a plus
• Ability to manage multiple projects and balance competing priorities
• Comfort analyzing operational and technical data under tight deadlines
• Independent, self-driven mindset with strong problem-solving skills
• Excellent communication and presentation skills, with the ability to explain complex concepts clearly
• Strong project management capabilities

It’s Great If You Have…

• Experience leading global projects across multiple regions
• Demonstrated strengths in:
  • Attention to Detail – thorough and conscientious in execution
  • Stakeholder Management – ability to work effectively with clients and leadership
  • Oral Communication – clearly conveys complex information
  • Problem Solving – identifies issues and determines accurate, relevant solutions
• Professional certifications such as CISA, CRISC, CISSP, or other relevant credentials

If you’re ready to help shape and strengthen both security and resilience in a global organization while working alongside talented professionals in an innovative environment, we’d love to hear from you.

Role Overview:

We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.

Key Responsibilities:

• Okta Identity Governance (OIG) & Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
• Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
• Design access certification campaigns and remediation workflows to satisfy audit requirements.
• Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
• Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
• Automation & Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
• Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
• Governance, Risk & Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
• Ensure identity controls are measurable, auditable, and enforced consistently.

Required Skills & Experience:

• 6+ years of hands-on experience operating Okta in a production environment.
• Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
• Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
• Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.

#sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #liverpool #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4 #LI-RS1

Get to Know Our Team – Security at Agoda 

At Agoda, our Security Department plays a critical role in safeguarding the organization. We oversee security, governance, risk management, compliance, and security operations across the company—ensuring there are no breaches or vulnerabilities that could impact our business or our people. 

As the security landscape evolves at an incredible pace, we pride ourselves on being early adopters of emerging technologies and innovative solutions. If you’re passionate about working with cutting-edge tools in a fast-moving, dynamic environment, this is an exciting challenge to take on. 

The Opportunity 

We are looking for a dedicated GRC (Governance, Risk Management & Compliance) Specialist/Sr. Specialist professional to join our team. 

In this role, you will collaborate closely with internal stakeholders to manage Information Security and Compliance risks. You’ll contribute across multiple areas including IT SOX compliance, risk management, and broader GRC initiatives. 

We’re seeking someone who is an independent, proactive thinker, a strong stakeholder manager, and a natural team player. 

This position is open to both local and international candidates, with relocation support available for eligible candidates to ensure a smooth transition to living and working in Bangkok. 

In This Role, You Will: 

• Apply strong knowledge of Risk Management, GRC functions, IT SOX Compliance, IT General Controls (ITGC) and industry frameworks (e.g., NIST CSF, PCI DSS and other leading standards). 

• Support and manage IT SOX compliance activities, including control design, testing, documentation, and remediation tracking. 

• Continuously assess risks and ensure IT policies, procedures, and standards are effectively embedded into daily operations. 

• Deliver high-quality work in a dynamic environment with minimal supervision. 

• Partner with internal teams to enhance and mature security controls. 

• Track and ensure timely remediation of audit and risk assessment findings—never missing a deadline. 

• Proactively identify gaps and recommend improvements through strong written and verbal communication. 

What You’ll Need to Succeed: 

• Bachelor’s degree in Business, Computer Information Systems, Computer Science, Information Systems Management, or equivalent experience. 

• At least 2-4 years of experience in a technology role, preferably within a security environment. 

• Strong understanding of international Information Security standards and frameworks. 

• Ability to manage multiple projects and balance competing priorities. 

• Comfort analyzing operational and technical data under tight deadlines. 

• Independent, self-driven mindset with strong problem-solving skills. 

• Excellent communication and presentation skills, with the ability to explain complex concepts clearly. 

• Strong project management capabilities. 

It’s great if you have… 

• Experience leading global projects across multiple regions. 

• Demonstrated strengths in: 

• Attention to Detail- Is thorough when performing work and conscientious about attending to detail. 

• Stakeholder management- Works with clients and leadership. 

• Oral Communication- Expresses information to individuals or groups effectively. 

• Problem Solving- Identifies problems; determines accuracy and relevance of information. 

• Professional security certifications such as CISA, CRISC, CISSP, or other relevant Information Security credentials. 

If you’re ready to help shape and strengthen security in a global organization while working alongside talented professionals in an innovative environment, we’d love to hear from you. 

Get to Know our Team: 

The Security Department oversees security, compliance, GRC, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees in order to keep Agoda safe and protected. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment.

This role is a 6-month contract based in Bangkok, Thailand and the succeeded candidate will be assigned to the project.

The Opportunity:

You will be working with a diverse group of expert security professionals from different parts of the world, pooling in years of experience in securing software products and corporate environments.

In this Role, you'll get to: 

• Help triage and track security findings, and collaborate with various teams to ensure timely remediation.
• Participate in code reviews, vulnerability assessments, and penetration testing under the guidance of senior analysts.
• Research and analyze the impact of security issues and help design strategies to minimize risk.
• Get hands-on experience with industry-standard security tools and platforms.
• Work with the team to understand how security integrates into CI/CD pipelines and modern cloud environments.

What you’ll need to succeed:

• Bachelor’s degree in IT or related fields
• Fresh graduates are welcome to apply. Preferably less than two years of experience.
• Familiar with basic programming
• Security and risk mindset
• Good English communication skill
• Ready to learn fast

It's Great if you have:

• Practical knowledge or experience in performing security assessments and vulnerability management
• Built some back-end applications and services.
• Familiarity with OWASP Top 10 and other security frameworks

#Bangkok #IT #entrylevel