Do meaningful work with us. Every day.
At Amplify Health, we’re looking for individuals with ambition, resilience and passion for healthcare, insurance, wellness and digital technology. As a fast-growing business with the ambition of making people and communities across Asia healthier, we have exciting career opportunities available to help us achieve our vision.
Responsbile for securing and governing user identities across the organization. This hands-on role focuses on implementing identity solutions using Entra ID (Azure AD), automating identity lifecycle processes, and enhancing authentication mechanisms. You will ensure that access to systems and data is appropriately controlled, aligning with AmplifyHealth's best practices and compliance standards.Who we are
Amplify Health Asia Pte. Limited (Amplify Health) is a leading health technology and analytics organisation, providing our customers with integrated solutions to improve outcomes for individuals and the sustainability of health systems.
We aim to be a trusted custodian of Asia's largest repository of health data, unifying financial, clinical, operational and behavioural data to empower our customers with insights that highlight opportunities to deliver better value and care outcomes.
We’ve set a bold vision
The vision for Amplify Health is to be a leading digital health technology and integrated solutions business.
Our Culture and Values
At Amplify Health, we believe in fostering a culture that embodies the spirit of Courageous Entrepreneurs. We are passionate and innovative individuals who continuously strive to push boundaries and think outside the box. We understand that calculated risks are essential for driving progress, and we view failures as valuable opportunities to learn and grow.
As Outstanding People, collaboration, learning, and growth are at the core of our values. We trust and rely on each other, working together as a unified team to achieve our goals. When success comes our way, we celebrate it as a collective achievement, and we are committed to improving and excelling together.
We firmly believe in the mantra of Discuss, Decide, Do. Listening is fundamental in our decision-making process, and we act promptly, ensuring accountability in everything we do. Simplicity is the key to our efficiency, and we get things done quickly and effectively while being guided by facts and understanding.
At the heart of our pursuits lies a Lasting Impact. We prioritize the needs of our customers, and we are crystal clear about the problems we are solving for them. Progress is our north star, and while we strive for excellence, we
acknowledge that perfection is a journey, and we remain focused on delivering excellent products that make a tangible difference.
If you are a passionate and innovative individual who thrives in a collaborative environment, where courage is celebrated, and customer focus is paramount, we invite you to join our team. Together, we will shape the future with our unwavering commitment to excellence and the determination to make a lasting impact in the industry.
What you will do
Identity Governance and Administration• Administer and optimize Entra ID to enforce role-based access controls (RBAC) across all systems and applications.
• Develop processes for managing user identities, ensuring accurate provisioning, de-provisioning, and updates.
• Collaborate with HR and IT to streamline identity lifecycle management processes.
• Evaluate controls and enforce design principles in Azure such as service principals and managed identities
Privileged Access and Elevated Access Management• Implement Entra PIM (Privileged Identity Management) to secure elevated access accounts.
• Explore solutions like BeyondTrust Password Safe to address gaps in privileged account management.
• Ensure proper logging and monitoring of privileged access to meet compliance requirements.
Authentication and Authorization Mechanisms• Design and maintain secure authentication frameworks for external applications (using SAML and OIDC) and internal systems (using OIDC and OAuth).
• Evaluate and recommend strategies for enhancing workload identity management for securely managing and authenticating federated identities across different Identity Providers (using Okta Workface, Auth0 CIAM)
User Provisioning and Lifecycle Management (JML)• Drive automation of Joiner-Mover-Leaver (JML) processes to reduce administrative overhead and errors.
• Identify and implement Entra ID Governance or equivalent tools for lifecycle management.
• Establish standard operating procedures for manual provisioning during the transition to automation.
User Access Reviews (UAR)• Lead periodic access reviews (every 3-6 months) to ensure appropriate access levels for all users.
• Implement automation tools to facilitate timely and accurate access reviews.
Threat Detection for Identity• Develop strategies to detect and mitigate identity-based threats, including unauthorized access and phishing attacks targeting privileged accounts.
• Research and recommend identity threat detection tools to enhance the organization’s security posture.
What you need to be successful
4-8 years of experience in IAM roles with hands-on experience managing Entra ID (Azure AD) or equivalent.Strong understanding of RBAC, JIT access management, PIM, and directory services (LDAP, Active Directory, etc.)Previous experience in operating IAM lifecycle automation tools (Okta, BeyondTrust, etc.)Proficiency with authentication protocols such as SAML, OIDC, and OAuth.Familiarity at least one scripting language for automation (Python, PowerShell, etc.) - (Desired)Knowledge of ISO27001 compliance standards.Qualifications: Certifications like CISSP or Azure Security Engineer Associate.You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.