Security Analyst (Bangkok-based, 10-month Contract)

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.  

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

The Security Department oversees security, compliance, GRC, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees in order to keep Agoda safe and protected. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment.

This role is a 10-month contract based in Bangkok, Thailand and the succeeded candidate will be assigned to the project.

You will be working with a diverse group of expert security professionals from different parts of the world, pooling in years of experience in securing software products and corporate environments.

• Learn and apply core Identity and Access Management (IAM) concepts - how digital identities are created, managed, and secured across an organization
• Get hands-on experience with Okta & Entra ID — managing users, groups, SSO configurations, and MFA policies
• Handle support tickets related to user access requests, application provisioning/deprovisioning, and access troubleshooting
• Assist in deploying and maintaining IAM infrastructure using Terraform, following infrastructure-as-code best practices
• Contribute to automation of repetitive IAM tasks (e.g., user lifecycle management, access reviews, provisioning workflows) using scripting or low-code tools
• Collaborate with IT, Security, and business teams to ensure access controls meet compliance and security standards

• Bachelor's degree in IT, Computer Science, or a related field
• Fresh graduates are welcome — preferably less than two years of experience
• Basic understanding of what IAM is — identity lifecycle, access control, authentication vs. authorization
• Familiarity with at least one directory or identity platform: Microsoft Entra ID, Okta, or Active Directory
• Basic scripting skills (Python, Go) to support automation tasks
• A security-first mindset — understanding why the right people should only have the right access
• Good English communication skills — written and verbal
• Eager to learn fast and take ownership of tasks

• Practical experience or coursework with Microsoft Entra ID / Azure AD or Okta (user management, app integrations, conditional access)
• Working knowledge of Active Directory — managing OUs, group policies, or user provisioning
• Exposure to Terraform for deploying cloud or IAM infrastructure
• Experience writing automation scripts to streamline access provisioning or reporting
• Familiarity with RBAC / ABAC concepts (Role-Based or Attribute-Based Access Control)
• Knowledge of CI/CD pipelines

#Bangkok #IT #entrylevel

• Agoda Careers https://careersatagoda.com
• Facebook https://www.facebook.com/agodacareers/
• LinkedIn https://www.linkedin.com/company/agoda
• YouTube https://www.youtube.com/agodalife

At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.

We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.