Identity Management Engineer

Identity Management EngineerFull-timeCompany DescriptionAbout Grab and Our WorkplaceGrab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.Job DescriptionGet to Know the TeamGrabber Technology Solutions (GTS) aims to be a technology leader that provides predictive and seamless experiences to all Grab employees (Grabbers). We are a diverse team of technology practitioners looking to out-serve Grabbers with positive, personalised IT experiences. We are looking for individuals with similar customer-centric and innovative values to join our growing teamThe Identity Management team is responsible for managing identities and privileged access across Grab's enterprise infrastructure. The team maintains core identity and access solutions, helping to secure Grab's privileged access landscape.Get to Know the RoleIn this position, you'll be supporting Grab's enterprise infrastructure with an emphasis on Identity and Privileged Access Management. The Identity Management team at Grab is committed to overseeing access to Grab's enterprise applications and safeguarding access to vital systems and sensitive data. Our mission is “Empowering Grabbers with secure, seamless access to systems and data; simplifying productivity and creating time for what matters”.Our responsibilities include ongoing monitoring, auditing, and regular reviews to uphold a robust access control environment. A mindset geared towards optimisation and automation is essential, along with the ability to work independently and foster relationships with stakeholders throughout Grab. If you believe you have what it takes, we'd love to hear from you!The Critical Tasks You Will PerformPrivileged Access Management & EngineeringImplement and operateCyberArk solutionsincludingPrivilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.Configure safes, platforms, credential rotation, session monitoring and access workflows to enforceleast privilege and secure privileged access.Onboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.Integration, Automation & GovernanceDevelopautomation - scripts or integrationsto improve onboarding, credential management and overall PAM efficiency.Supportaudits and complianceby providing access evidence, logs and ensuring controls are operating effectively.Proactively identify gaps in privileged access coverage and drive improvements across the environment.Identity OperationsManage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.Configure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.Provision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.Drive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.Develop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.Support audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.Manage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.Develop and maintain documentation, including best practices, technical guides, and standard operating procedures.QualificationsWhat Essential Skills You Will Need4–6 years of strong hands-on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.Proven, deep hands-on experience with CyberArk (not just familiarity or exposure), including:Privilege CloudSecure Web Sessions (SWS)Remote AccessConjur (Secrets Management)Experience configuring safes, platforms, policies, credential rotation and session monitoringUse of CyberArk APIs for plugins, automations and integrations.Demonstrated experienceimplementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.Hands-on experience with a leading Identity platform such asJumpCloud (preferred), Okta, Azure AD or similar.Strong understanding ofPAM principles(least privilege, just-in-time access, credential vaulting, session monitoring, segregation of duties).Solid foundation inIAM conceptsincluding identity lifecycle management, authentication, authorisation, SSO and access governance.Experience working withsecurity, risk and compliance teams, including supporting audits and interactions with auditors.Strong problem-solving skills with the ability toautomate and troubleshoot using scripting(Python, Bash, PowerShell or similar).Experience contributing toIAM/PAM implementations or transformation initiatives, from design through execution.Strong ownership mindset —proactive, self-driven, and willing to take responsibility end-to-end.Excellent communication and collaboration skills, with experience working withglobally distributed, cross-functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.Additional InformationLife at GrabWe care about your well-being at Grab, here are some of the global benefits we offer:We have your back withTerm Life Insuranceand comprehensiveMedical Insurance.WithGrabFlex,create a benefits package that suits your needs and aspirations.Celebrate moments that matter in life with loved ones throughParentalandBirthday leave, and give back to your communities throughLove-all-Serve-all (LASA)volunteering leaveWe have a confidentialGrabber Assistance Programmeto guide and uplift you and your loved ones through life's challenges.Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hoursWhat We Stand For At GrabWe are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy applyJob LocationGoogle Maps requires functional cookies to be enabledI'm interestedI'm interestedPrivacy Notice