IT Security Consultant-Alabang

Position Summary

The Consultant Security Systems Engineer will be part of a leading-edge security systems team transforming enterprise infrastructure into an agile, adaptable, and highly trusted computing platform. The team leverages advanced security assurance platforms to enable secure, cost-effective Infrastructure-as-a-Service (IaaS) solutions while strengthening the organization's overall security posture.

This position is responsible for the design, implementation, configuration, integration, and support of IBM Verify Access (formerly IBM Security Access Manager), WebSEAL, and IBM DataPower Gateway, along with other enterprise security tools necessary to protect the financial future of Voya customers.

The role serves as a senior technical resource for complex, high-risk security engineering challenges involving identity and access management (IAM), web access management, authentication, authorization, API security, and secure application integration. The consultant will help implement, monitor, and maintain security policies and technical controls that protect enterprise information, environments, and systems.

Position Description / Key Responsibilities

• Perform platform engineering for IBM Verify Access, WebSEAL, and IBM DataPower Gateway, including design, implementation, configuration, administration, and ongoing operational support.
• Design, configure, and support IBM Verify Access policies for authentication, authorization, single sign-on (SSO), and identity-based access controls.
• Implement and troubleshoot WebSEAL reverse proxy configurations, junctions, authentication mechanisms, access policies, and secure connections between users, applications, and backend services.
• Configure and support IBM DataPower Gateway for secure API and web service integration, traffic management, XML/JSON processing, message transformation, routing, and security policy enforcement.
• Integrate Verify Access/WebSEAL and DataPower with enterprise applications, identity providers, LDAP directories, multifactor authentication (MFA), and other security platforms.
• Troubleshoot complex authentication, authorization, SSO, reverse proxy, API connectivity, certificate, encryption, and web traffic issues.
• Establish and maintain platform design standards, configuration guidelines, security policies, operational metrics, and continuous validation procedures.
• Oversee day-to-day operational support, platform health monitoring, incident resolution, and service improvement activities.
• Plan and execute software upgrades, security patches, configuration changes, and infrastructure migrations while minimizing service disruptions.
• Identify opportunities to automate platform administration, deployment, monitoring, and security operations using scripting and other automation tools.
• Collaborate with application, infrastructure, network, cloud, security, and business teams to drive enterprise-wide adoption of supported security technologies.
• Evaluate and implement emerging security technologies and industry best practices to strengthen enterprise security capabilities.
• Maintain accurate technical documentation, architecture diagrams, configuration records, operational procedures, and troubleshooting guides.
• Provide technical guidance and resolve critical or escalated security engineering issues.

Knowledge and Experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent relevant professional experience.
• At least 5 years of experience in an enterprise IT environment.
• 3–5 years of experience in information security engineering, implementation, monitoring, or technical support.
• Hands-on experience with IBM Verify Access / IBM Security Access Manager and WebSEAL, including reverse proxy configuration, junctions, authentication, authorization, SSO, and access policy troubleshooting.
• Hands-on experience with IBM DataPower Gateway, including configuration, API and web service security, routing, message processing, certificate management, and troubleshooting.
• Experience integrating IBM Verify Access/WebSEAL and DataPower with enterprise applications, LDAP, MFA, identity providers, and backend services.
• Strong understanding of identity and access management (IAM), access controls, authentication protocols, SSO, and web application security.
• Strong Unix/Linux command-line skills and Bash shell scripting experience.
• Solid understanding of SSL/TLS, digital certificates, public key infrastructure (PKI), encryption, HTTP/HTTPS, web traffic analysis, and network packet troubleshooting.
• Experience supporting enterprise security technologies, including LDAP, privileged access management (PAM), database and system monitoring, password management, and SSO platforms.
• Experience working collaboratively with clients, technical teams, professional staff, and management to deliver and support enterprise IT services.
• Experience planning and executing software or infrastructure upgrades with minimal service disruption.
• Hands-on experience with Unix/Linux, Windows, and VMware environments.
• Familiarity with IP networking, firewalls, load balancers, cloud infrastructure, and enterprise network architecture.
• Working knowledge of information security principles, security incident response, and risk management.
• Strong technical documentation, analytical, troubleshooting, and problem-solving skills.
• Experience using ServiceNow or similar IT service management platforms is preferred.
• JavaScript scripting experience is a bonus.

Preferred Technical Skills

• IBM Verify Access / IBM Security Access Manager
• IBM WebSEAL reverse proxy and junction configuration
• IBM DataPower Gateway
• Identity and Access Management (IAM), SSO, and MFA
• LDAP integration and authentication policy configuration
• API security, web services, and secure application integration
• SSL/TLS, PKI, certificates, and encryption troubleshooting
• Unix/Linux and Bash scripting
• Security automation, monitoring, and incident troubleshooting