VP, IAM API & Integration Engineer, Technology Group

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group
We experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new, and emerging technologies. 

Infrastructure & Cybersecurity Resilience (ICR)
We design, build, and secure the technology foundations that power GIC’s global investment operations. We aim to deliver resilient, scalable, and secure infrastructure that empowers our people and businesses to perform securely, efficiently, and effectively.

What impact can you make in this role?

You’ll be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that support GIC’s vision of being a tech-driven, global, long-term investment firm. In this hands-on, on-site individual-contributor role within IAM Engineering, you will design and build GIC’s IAM API & Integration Layer. This layer gives applications a single, consistent and secure way to use identity, privileged-access, secrets and governance capabilities.

What will you do as a VP, IAM API & Integration Engineer?

• Design, build and own the IAM API & Integration Layer. It sits in front of GIC’s IAM products and exposes them through consistent, versioned APIs that don’t depend on any one product.
• Develop APIs and integrations across the IAM stack (HashiCorp Vault, CyberArk, Ping, SailPoint and others), including a single identity and entitlement data model that every product maps into.
• Set the common API standards, security guardrails, recommended patterns (“golden paths”) and audit standards that all IAM teams follow. Act as design authority, reviewing other teams’ APIs for consistency.
• Build resilient, event-driven integration flows on Kubernetes and AWS, managed as code through Terraform, Ansible and GitHub CI/CD. Operate the layer as a business-critical (Tier-0) service with high availability, disaster recovery and full monitoring.
• Secure the layer itself through zero-trust design, least-privilege access and integration with Vault and GIC’s central access-policy engine. Use AI coding tools in engineering work, with human review and guardrails.
• Direct service partners, work directly with product vendors on capabilities and escalations, mentor engineers, and drive adoption across the organisation.

What qualifications or skills should you possess in this role?

• Bachelor’s Degree in Computer Science, Computer Engineering, Information Technology or equivalent.
• At least 10 years of hands-on software engineering experience, preferably in financial services or asset management industries, with minimum 5 years in IAM engineering.
• Proven track record of designing and building an API integration layer in front of IAM products -  HashiCorp Vault, CyberArk, Ping and SailPoint, with working knowledge of their APIs.
• Hands-on production experience in:
  • OAuth2/OIDC, SAML, SCIM, JWT, mTLS and token services
  • Design-first APIs (OpenAPI), API gateways, versioning, and event-driven and facade/BFF patterns
  • Backend development in Java or Python
  • HashiCorp Vault: auth methods, secrets engines (KV v2, dynamic credentials, PKI, Transit), policy-as-code and Kubernetes integration
  • Terraform, Ansible, Git, GitHub and GitHub Actions
  • Kubernetes and AWS at scale, including workload identity, EKS, KMS and API Gateway
• Experience directing service partners and working with product vendors on technical delivery and escalations.
• Hands-on use of AI coding agents and LLM tools in day-to-day development.
• Experience with Microsoft Entra ID or Veza, service mesh (e.g. Istio), Kafka, distributed tracing, or running business-critical security services would be advantageous.
• AWS, CKA, HashiCorp Terraform or Vault certifications are a plus.
• A hands-on builder who is comfortable writing production code every week while holding architecture authority. Clear communicator who sets standards and brings teams along, balancing security with developer experience and speed of delivery.

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact. 

GIC is a Great Place to Work

At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection.  At the same time, we believe that flexibility allows us to do our best work and be our best selves.  Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise. 

GIC is an equal opportunity employer 
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn more about our Technology Group here: 
https://gic.careers/group/technology-group/