Systems Engineer

Responsibilities

• Manage identity lifecycle processes including joiner, mover, and leaver workflows
• Implement Conditional Access, MFA, and risk-based controls
• Maintain role-based access models and administer enterprise applications with SSO integrations
• Plan and deploy AD Sites and Services and manage domain controller lifecycles
• Operate the CyberArk PAM platform, managing privileged account onboarding and credential rotation
• Automate identity and system tasks using PowerShell
• Support hybrid identity via Entra Connect and assist with M&A integrations
• Serve as an escalation point for complex production, application, or system problems

Requirements

• 5+ years in identity or security engineering
• Extensive experience with Entra ID, Conditional Access, and MFA
• Experience with CyberArk or similar Privileged Access Management (PAM) tools
• Knowledge of identity protocols such as SAML, OAuth, and OIDC
• Proficiency in Kerberos, LDAP, Active Directory, ADFS, DNS, and DHCP
• Expert knowledge of Windows Server environments, GPOs, and Active Directory
• 4-year college degree in Information Technology or a related field

Preferred Qualifications

• Technical degree or industry-specific certifications
• Experience with ADMT and Quest for user migrations
• Ability to communicate technical information to diverse audiences and offshore teams

About the Company

Arch Global Services (Philippines) Inc. is a member of Arch Capital Group LLC, a global leader in insurance, reinsurance, and mortgage insurance solutions. We serve as a high-impact Global Service Operations hub providing critical support across Finance, IT, Risk, and Data & Analytics.