Cloud Security Engineer (Infrastructure & DevSecOps)

PT Global Digital Niaga; Kemayoran; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to secure and enable the e-commerce platform by designing, implementing, and improving cloud and infrastructure security controls. The role focuses on PCI DSS and ISO 27001 compliance, security in engineering processes, and rapid, secure product delivery.

You will work with AWS/GCP/Azure, implement security patterns, perform posture assessments, and drive security into development workflows.

Qualifications

• Bachelor's degree in computer science, information systems, or related technical disciplines.
• 3–5 years of experience in Infrastructure Security, Cloud Security, or related fields.
• Fluent in Bahasa Indonesia with working proficiency in English for technical documentation, cloud advisories, audit frameworks, and vendor communications.

Responsibilities

• Design, implement, and maintain cloud security architectures across AWS, GCP, or Azure environments.
• Develop and enforce secure infrastructure patterns, including least-privilege IAM, network segmentation, encryption, and audit logging.
• Perform cloud security posture assessments and remediate misconfigurations identified via CSPM tools.
• Conduct threat modeling exercises (e.g., STRIDE) for new products and platform changes.
• Implement CIS Benchmark-based hardening across Linux, Kubernetes, databases, containers, and cloud environments.
• Collaborate with Engineering, Platform, SRE, and Product teams to integrate security into CI/CD pipelines.
• Build and maintain security automation solutions using Python, Go, Bash, or similar.
• Develop IaC security controls for Terraform and CloudFormation.

Skills

AWS

GCP

Microsoft Azure

Linux OS

Python

Golang

Kubernetes

IaC

Identity & Access Management

Education

Bachelor's degree

Job description

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to secure and enable the e-commerce platform by designing, implementing, and improving cloud and infrastructure security controls. The role focuses on PCI DSS and ISO 27001 compliance, security in engineering processes, and rapid, secure product delivery.

You will work with AWS/GCP/Azure, implement security patterns, perform posture assessments, and drive security into development workflows.