Cloud Security Engineer - Infra & IaC Automation

Blibli; Indonesia; On-site; IDR 400,000,000 - 720,000,000; Full time

Job summary

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to design, implement, and continually improve cloud and infrastructure security controls for its Indonesia-based platform. You will protect customer trust and support PCI DSS and ISO 27001 compliance while embedding security into engineering processes to enable rapid, secure software delivery.

You will work with Engineering, Platform, SRE, and Product teams to enforce least-privilege IAM, automate security through IaC, and

Qualifications

• Bachelor's degree in a technical field.
• 3–5 years in Infrastructure/Cloud Security or related areas.
• Hands-on experience securing production infrastructure environments.
• Proficient in Bahasa Indonesia and English for docs and audits.
• Strong experience with AWS, GCP and Azure.

Responsibilities

• Design, implement, and maintain cloud security architectures.
• Enforce secure infrastructure patterns and IAM least-privilege models.
• Perform CSPM and remediate misconfigurations.
• Conduct threat modeling for new products and platform changes.
• Apply CIS Benchmark hardening to Linux, Kubernetes, databases, and cloud.
• Integrate security controls into CI/CD and IaC workflows.
• Develop IaC security controls for Terraform and CloudFormation.
• Strengthen Kubernetes security: RBAC, policies, image security.
• Support IAM initiatives: SSO, SAML, OIDC, secrets management.
• Produce compliance evidence for PCI DSS and ISO 27001 audits.
• Run third-party security assessments and handle on-call incidents.
• Collaborate with engineering to shift security left in SDLC.
• Monitor threat landscape and improve security posture.

Skills

Cloud security

Infrastructure security

Python

Golang

AWS

GCP

Azure

Linux

Kubernetes

IAM

Education

Bachelor's degree

Tools

Terraform

CloudFormation

CI/CD tooling

Job description

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to design, implement, and continually improve cloud and infrastructure security controls for its Indonesia-based platform. You will protect customer trust and support PCI DSS and ISO 27001 compliance while embedding security into engineering processes to enable rapid, secure software delivery.

You will work with Engineering, Platform, SRE, and Product teams to enforce least-privilege IAM, automate security through IaC, and