Get to Know Our Team

The Global Service Delivery (GSD) team is responsible for Agoda's office infrastructure and staff connectivity. We provide the hardware, software, and access to resources that allows staff to achieve their goals. Whether in the office, working remotely, or traveling, we enable everyone to stay connected. The GSD team uses state-of-the-art cloud management technologies combined with the best of on-site services to manage the latest hardware running Windows, macOS, and Linux.

The Opportunity

We are looking for candidates with a passion for corporate technology and experience in Identity and Access Management (IAM) to join our team in Bangkok. This role offers excellent growth opportunities in a multicultural environment. 

Responsibilities:

- Support business access requirements on multiple systems. 

- Resolve day-to-day issues assigned to the GSD Operations team. 

- Design, implement, and manage user access controls and permissions. 

- Oversee the user provisioning lifecycle in the company 

- Automate identity and roles provisioning and de-provisioning processes. 

- Maintain role-based access control (RBAC) and attribute-based access control (ABAC) models. 

- Provide support and troubleshooting for requests received via ServiceDesk, ensuring all requests are completed within the agreed SLA. 

- Take on long-term projects in addition to daily tasks, allowing for growth and development. 

- Make quick decisions, implement standards, and best practices to improve support processes. 

Requirements:

- Fluent in English. 

- Enthusiastic team player. 

- Critical thinker – likes to challenge and ask questions 

- Minimum 4 years of experience in IT Helpdesk, IT Operations support, or as an IAM Analyst. 

- Background in “no code” automations and working with APIs. 

- Solid knowledge of SQL Database Server and query commands. 

- Good knowledge of Okta or similar Identity Providers (IDP). 

- Good knowledge of Active Directory management tools, Exchange, and SharePoint. 

- Good knowledge of Azure AD, Exchange Online, or Microsoft Office 365. 

- Customer service-minded with great communication and interpersonal skills. 

- Strong organizational and time management skills, analytical skills, attention to detail, and accuracy. 

- Must demonstrate ownership and be both proactive and reactive. 

This position is based in Bangkok, Thailand. (Relocation support is provided)

Get to Know Our Team 

The Data department oversees Agoda’s data-related platform and infrastructure capabilities, enabling the company to make better decisions and operate reliably at scale. Our goal is to empower teams across Agoda through resilient, secure, and high-performing systems that support development, deployment, and operations across a complex technology landscape. 

Within the department, the platform engineering team is responsible for building and operating critical infrastructure that powers Agoda’s private cloud environment. This includes large-scale Kubernetes platforms across multiple data centers, continuous delivery capabilities, service-to-service connectivity, observability, secrets management, and foundational security controls. We work closely with engineering, security, and infrastructure partners to ensure our platforms are secure, scalable, and easy to use. 

As Agoda continues to evolve its platform capabilities, we are also expanding our focus to Platform Identity Access Management (PIAM) — a strategic initiative that will strengthen authentication and authorization across Kubernetes, virtual machines, bare metal servers, laptops, and mobile devices. This work will play a key role in improving platform security, compliance, and operational consistency across the organization. 

The Opportunity 

As a Senior Lead Engineer, you will drive the architecture, implementation, and operational excellence of Agoda’s private cloud platform while leading strategic initiatives that improve scalability, reliability, security, and delivery velocity across the Data department. 

This role is ideal for a highly experienced and deeply hands-on platform engineering leader who thrives on solving complex distributed systems challenges at scale. You will provide technical leadership across large multi-cluster Kubernetes environments, improve deployment and observability capabilities, strengthen secrets and key management practices, and lead Agoda’s Platform Identity Access Management (PIAM) initiative from early architecture through implementation. 

This is a senior individual contributor role with significant technical ownership. While you will influence engineering standards and support other engineers, the role is strongly execution-focused and requires substantial hands-on contribution in design, coding, automation, and operational problem solving. 

You will work closely with developers, platform teams, security stakeholders, and engineering leaders to shape the future of Agoda’s infrastructure platform and enable teams to build and operate securely and efficiently. 

In This Role, You’ll Get To 

• Design, lead, and evolve Agoda’s private cloud platform architecture across multiple data centers, with a strong focus on scalability, resilience, performance, and operational excellence. 

• Lead the operation and continuous improvement of large-scale Kubernetes environments spanning multiple clusters and regions. 

• Drive architectural decisions around cluster networking, service communication, and platform reliability in high-demand distributed environments. 

• Contribute directly to the implementation of platform capabilities through hands-on coding, automation, and system design. 

• Improve continuous delivery and deployment capabilities to enable reliable, low-friction software releases from source control to production. 

• Support and enhance progressive delivery practices such as canary rollouts, deployment health monitoring, and uptime protection. 

• Lead the adoption and evolution of service mesh capabilities, including traffic management, service connectivity, and platform observability. 

• Define and improve secrets and key management practices using platforms such as HashiCorp Vault, AWS SSM, and KMS, ensuring strong security and audit readiness. 

• Drive compliance-aligned infrastructure capabilities to support internal controls, audit requirements, and future financial-grade security expectations. 

• Lead the design and execution of Agoda’s Platform Identity Access Management (PIAM) initiative, expanding identity and access controls beyond Kubernetes to cover VMs, bare metal infrastructure, laptops, mobile devices, and other platform connections. 

• Partner with security, infrastructure, and engineering stakeholders to gather requirements, define architecture, and develop a roadmap for PIAM implementation. 

• Solve complex technical challenges across platform engineering, infrastructure automation, distributed systems, security, and reliability. 

• Set a high technical bar through strong engineering judgment, code quality, system design, and operational excellence. 

• Capture, document, and share best practices to improve platform consistency, maintainability, and engineering effectiveness. 

What You’ll Need to Succeed 

• Extensive experience in platform engineering, infrastructure engineering, site reliability engineering, or DevOps roles in large-scale production environments. 

• Proven experience in senior, staff, principal, or equivalent technical leadership roles with significant system ownership and architectural responsibility. 

• Strong hands-on expertise with Kubernetes and containerized platforms, including operating multi-cluster or multi-region environments at scale. 

• Strong software engineering ability with hands-on coding experience in Golang; proficiency in Python, Bash, or Shell scripting is also highly valuable. 

• Proven ability to design, build, and operate robust platform systems through code, not only through architecture or coordination. 

• Strong experience designing, building, and operating complex distributed systems with high reliability and performance requirements. 

• Strong understanding of networking, service-to-service communication, and infrastructure architecture in large distributed environments. 

• Experience leading and improving continuous delivery / CI/CD capabilities and deployment workflows for engineering organizations. 

• Hands-on experience with service mesh technologies such as Istio, and a solid understanding of traffic management and platform observability patterns. 

• Strong experience with secret management, encryption, and platform security controls, including technologies such as HashiCorp Vault, AWS SSM, and KMS or equivalent solutions. 

• Experience working with compliance, audit, or security-sensitive infrastructure requirements. 

#Bengaluru #Hyderabad #Pune #Chennai #Gurugram #Singapore #Seattle #SanFrancisco #SanJose #Bellevue #Redmond #Austin #NewYorkCity #Toronto #Vancouver #London #Dublin #Amsterdam #Berlin #Munich #Warsaw #Kraków #Wrocław #Prague #Brno #Barcelona #Madrid #Stockholm #Zurich #TelAviv #Sydney #Melbourne #Tokyo #Osaka #Seoul #Taipei #Hsinchu #Hong Kong #Shenzhen #Shanghai #Beijing #Hangzhou #HoChiMinhCity #Hanoi #KualaLumpur #Cyberjaya #Bangkok #Jakarta #SãoPaulo #MexicoCity #Oakland #SantaClara #Sunnyvale #MountainView #PaloAlto #SanDiego #LosAngeles #Boston #Chicago #Denver #Raleigh #Durham #Portland #Washington #Arlington #Dallas #Plano #Atlanta #Montreal #Ottawa #Waterloo #Calgary #Manchester #Cambridge #Bristol #Edinburgh #Cork #Utrecht #Eindhoven #Frankfurt #Hamburg #Cologne #Gdańsk #Poznań #Lisbon #Porto #Copenhagen #Helsinki #Oslo #Vienna #Budapest #Bucharest #Tallinn #Vilnius #Kaunas #Noida #Mumbai #Kochi #Coimbatore #Canberra

Required:

• 3+ in Windows desktop application development using Windows App SDK, WinUI (or similar), C#, XAML — and ideally additional experience with native Windows code (C++, Win32/WinRT/COM).
• Deep understanding of Windows application architecture, including interop between managed code (.NET) and native code.
• Proven track record of designing, building, and shipping production-quality desktop applications, with an emphasis on reliability, performance, scalability, and maintainability.
• Strong experience with accessibility APIs on Windows (e.g. Microsoft UI Automation or similar), and a dedication to building accessible and inclusive software.
• Excellent software engineering fundamentals: OOP, design patterns, data structures, algorithms, memory management, multi-threading or asynchronous programming (where relevant).
• Experience leading technical design, mentoring other engineers, conducting code reviews, and making architecture-level decisions.
• Strong communication skills; ability to articulate tradeoffs, collaborate with cross-functional teams, and drive consensus.
• A user-centric mindset: focus on building polished, intuitive, and accessible experiences for end users.

Preferred / Bonus:

• Experience with writing automated tests for UI — unit tests, integration tests, UI automation tests; familiarity with relevant testing frameworks.
• Experience with performance optimization for desktop apps (memory usage, startup time, rendering performance, high-DPI support, responsiveness under load).
• Experience with localization/globalization, right-to-left UI support, internationalization, accessibility for multiple regions.
• Familiarity with telemetry, analytics, crash reporting, logging, and error monitoring in desktop applications.
• Previous experience in shaping CI/CD workflows, release pipelines, and deployment strategies for desktop applications.
• Demonstrated ability to take ownership of feature areas or modules and drive them long-term, including maintenance, refactoring, and technical debt management.

What we offer

• A high-impact role: you will define architecture, shape the future of our Windows product, and directly influence what millions of users see and experience.
• A collaborative, flat-structure engineering culture — you are not just a coder, but a builder and a decision-maker.
• Opportunities to lead — mentor others, steer technical direction, and grow into broader technical leadership (e.g. Tech Lead, Architect).
• Flexibility, autonomy, and responsibility: you define how to solve problems, own features end-to-end, and contribute to long-term product vision.
• A purpose-driven mission: building software that’s reliable, accessible, and user-centered — making a real difference for people.                  

Think you’re a good fit for this job? 

Tell us more about yourself and why you're interested in the role when you apply.
And don’t forget to include links to your portfolio and LinkedIn.

Not looking but know someone who would make a great fit? 
Refer them! 

Speechify is committed to a diverse and inclusive workplace. 
Speechify does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

Role Overview:

We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.

Key Responsibilities:

• Okta Identity Governance (OIG) & Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
• Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
• Design access certification campaigns and remediation workflows to satisfy audit requirements.
• Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
• Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
• Automation & Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
• Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
• Governance, Risk & Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
• Ensure identity controls are measurable, auditable, and enforced consistently.

Required Skills & Experience:

• 6+ years of hands-on experience operating Okta in a production environment.
• Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
• Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
• Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.

Capco, a Wipro company, is a global technology and management consultancy specializing in driving digital transformation in the financial services industry. With a growing client portfolio comprising of over 100 global organizations, Capco operates at the intersection of business and technology by combining innovative thinking with unrivalled industry knowledge to deliver end-to-end data-driven solutions and fast-track digital initiatives for banking and payments, capital markets, wealth and asset management, insurance, and the energy sector. Capco’s cutting-edge ingenuity is brought to life through its Innovation Labs and award-winning Be Yourself At Work culture and diverse talent.

Role Summary

The DevOps Engineer is responsible for supporting the bank's application delivery and operational automation by implementing CI/CD pipelines, infrastructure automation, and deployment standards. This role works closely with Cloud, Application, and Security teams to ensure reliable, secure, and efficient software delivery in a regulated Virtual Bank environment.

What You’ll Do

• Design, implement, and maintain CI/CD pipelines for application build, test, and deployment.
• Automate infrastructure provisioning and configuration using infrastructure-as-code (IaC) tools.
• Support application release, deployment, and rollback processes across environments.
• Collaborate with development teams to improve deployment reliability and release efficiency. 
• Implement monitoring, logging, and alerting to improve system observability.
• Support incident response related to deployment, automation, and platform issues. 
• Participate in root cause analysis and implement preventive and corrective actions. 
• Ensure DevOps practices comply with security, risk, and regulatory requirements.
• Maintain documentation for pipelines, automation scripts, and operational runbooks. 
• Continuously improve DevOps tools, processes, and automation standards.

What We’re Looking For

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum 3-5 years of experience in DevOps, platform engineering, or related roles.
• Hands-on experience with CI/CD tools, version control, and build automation.
• Experience with infrastructure-as-code and automation tools (e.g. Terraform, Ansible, scripting).
• Familiarity with cloud platforms (Azure preferred; AWS/GCP is a plus).
• Basic understanding of cloud security, access control, and operational controls. 
• Experience working in 24x7 operational or production support environments is preferred.
• Good problem-solving skills and ability to work collaboratively across teams. 
• Proficient in Thai and English at intermediate level or above, sufficient for technical discussions, meetings, and written documentation

Why Join CAPCO

• Work on engaging projects with some of the largest banks/insurance in the world, on projects that will transform the financial services industry
• Work in a collaborative, flat, and entrepreneurial consulting culture
• Access continuous learning, training, and industry certifications
• Be part of a team shaping the future of digital financial services
• Help shape the future of digital transformation across FS & Energy

We offer

• A work culture focused on innovation and creating lasting value for our clients and employees
• Ongoing learning opportunities to help you acquire new skills or deepen existing expertise in our financial services offerings
• A flat, non-hierarchical structure that will enable you to work with senior partners and directly with clients
• An agile, diverse, entrepreneurial, inclusive, meritocratic culture

Joining Capco means joining an organisation that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can and we believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help.

We have been informed of several recruitment scams targeting the public. We strongly advise you to verify identities before engaging in recruitment related communication. All official Capco communication will be conducted via a Capco recruiter.

#LI-PW1 #LI-Hybrid

#sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #liverpool #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4 #LI-RS1

Role Overview:

We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.

Key Responsibilities:

• Okta Identity Governance (OIG) & Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
• Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
• Design access certification campaigns and remediation workflows to satisfy audit requirements.
• Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
• Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
• Automation & Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
• Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
• Governance, Risk & Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
• Ensure identity controls are measurable, auditable, and enforced consistently.

Required Skills & Experience:

• 6+ years of hands-on experience operating Okta in a production environment.
• Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
• Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
• Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.

#sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #liverpool #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4 #LI-RS1