Lead IT & Security Engineer - Endpoint & Identity

Xenith; Jakarta Pusat; Hybrid; IDR 1,610,594,000 - 2,684,324,000; Full time

Job summary

Xenith seeks a hands-on IT and security engineer to own the platforms supporting engineering, product, commercial, operations, and more. You will shape tooling, standards, and policies, growing the function to serve the whole company. This is a first dedicated IT/security hire for a fintech-focused B2B platform.

The role reports to Head of Engineering and opens in Singapore or Indonesia, with responsibilities spanning endpoint management, IAM, and security operations to scale with the business.

Qualifications

• 5+ years in IT, endpoint, or systems engineering with sole responsibility experience.
• Hands-on managing macOS and Windows fleets; able to stand up an MDM from scratch (Jamf, Intune, Kandji or equivalent).
• Ownership of identity and access lifecycle – SSO, MFA, offboarding, and periodic access reviews (Okta, Entra ID, Google Workspace or equivalent).
• Comfortable on the Linux/macOS command line; able to script repetitive tasks (Bash, PowerShell or Python).
• Knowledge of VPN, firewall, and least-privilege access design.
• Experience with business SaaS platforms at scale; licensing and security settings.
• Experience in regulated/audited environments (PCI-DSS, ISO 27001, SOC 2).
• Ability to explain technical constraints to non-technical colleagues and work across timezones.

Responsibilities

• Own endpoint management across macOS and Windows for company devices, including enrolment, disk encryption, OS/patch policy, and remote wipe.
• Manage the identity and access lifecycle end-to-end: joining, moving, leaving; SSO and password management; provisioning before start dates and revocation on departure.
• Administer core business and collaboration platforms; manage licensing, security configuration, and cost.
• Run security operations for the internal estate: endpoint protection, patch and vulnerability remediation, email/phishing defence, and first response.
• Lead vendor security reviews and respond to security assessments with reusable, scalable answers.

Skills

IT and systems engineering

MDM management

IAM management

Scripting

Security governance

English communication

Tools

Jamf

Intune

Kandji

Okta

Entra ID

Google Workspace

Job description

Xenith seeks a hands-on IT and security engineer to own the platforms supporting engineering, product, commercial, operations, and more. You will shape tooling, standards, and policies, growing the function to serve the whole company. This is a first dedicated IT/security hire for a fintech-focused B2B platform.

The role reports to Head of Engineering and opens in Singapore or Indonesia, with responsibilities spanning endpoint management, IAM, and security operations to scale with the business.