# Identity Management Engineer

**Company**: Grab
**Location**: Jakarta, Indonesia
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://jobs.smartrecruiters.com/Grab/744000159593308-identity-management-engineer?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_c32b4fdb-7d2

## Description

Grab is Southeast Asia's leading superapp, providing various services including food delivery, financial management, and transportation.

We are looking for an Identity Management Engineer to join our team in Jakarta, Indonesia.

**Job Description**

As an Identity Management Engineer, you will be supporting Grab's enterprise infrastructure with an emphasis on Identity and Privileged Access Management.

**Responsibilities**

- Implement and operate CyberArk solutions including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.

- Configure safes, platforms, credential rotation, session monitoring and access workflows to enforce least privilege and secure privileged access.

- Onboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.

- Develop automation scripts or integrations to improve onboarding, credential management and overall PAM efficiency.

- Support audits and compliance by providing access evidence, logs and ensuring controls are operating effectively.

- Proactively identify gaps in privileged access coverage and drive improvements across the environment.

- Manage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.

- Configure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.

- Provision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.

- Drive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.

- Develop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.

- Support audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.

- Manage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.

- Develop and maintain documentation, including best practices, technical guides, and standard operating procedures.

**Qualifications**

- 4–6 years of strong hands-on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.

- Proven, deep hands-on experience with CyberArk, including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur (Secrets Management).

- Experience configuring safes, platforms, policies, credential rotation and session monitoring.

- Use of CyberArk APIs for plugins, automations and integrations.

- Demonstrated experience implementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.

- Hands-on experience with a leading Identity platform such as JumpCloud, Okta, Azure AD or similar.

- Strong understanding of PAM principles (least privilege, just-in-time access, credential vaulting, session monitoring, segregation of duties).

- Solid foundation in IAM concepts including identity lifecycle management, authentication, authorisation, SSO and access governance.

- Experience working with security, risk and compliance teams, including supporting audits and interactions with auditors.

- Strong problem-solving skills with the ability to automate and troubleshoot using scripting (Python, Bash, PowerShell or similar).

- Experience contributing to IAM/PAM implementations or transformation initiatives, from design through execution.

- Strong ownership mindset , proactive, self-driven, and willing to take responsibility end-to-end.

- Excellent communication and collaboration skills, with experience working with globally distributed, cross-functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.

**Benefits**

- Term Life Insurance and comprehensive Medical Insurance.

- GrabFlex, a benefits package that suits your needs and aspirations.

- Parental and Birthday leave, and Love-all-Serve-all (LASA) volunteering leave.

- Confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.

- FlexWork arrangements such as differentiated hours.

## Skills

### Required
- CyberArk
- Privilege Cloud
- Secure Web Sessions (SWS)
- Remote Access
- Conjur
- Identity & Access Management (IAM/PAM)
- Privileged Access Management
- Python
- Bash
- PowerShell

### Nice to have
- JumpCloud
- Okta
- Azure AD

---

Source: [Apply at jobs.smartrecruiters.com](https://jobs.smartrecruiters.com/Grab/744000159593308-identity-management-engineer?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)