Senior IT & Security Engineer — Endpoint & IAM Lead

Xenith; Jakarta Barat; On-site; IDR 1,592,638,000 - 2,123,518,000; Full time

Job summary

Xenith is seeking a hands-on IT security and systems engineering leader to own the technology stack across the company’s devices and platforms. You will build scalable processes, set standards, write policies, and drive security postures across finance, product, and operations.

You will manage macOS and Windows fleets, lead identity and access governance, and automate repetitive tasks. This role reports to the Head of Engineering and requires strong communication across time zones.

Qualifications

• 5+ years in IT, endpoint, or systems engineering.
• Hands-on managing macOS and Windows fleets; stand up MDM from scratch (Jamf, Intune, Kandji or equivalent).
• Ownership of the identity and access lifecycle – SSO, MFA, offboarding and periodic access reviews.
• Comfortable on Linux/macOS CLI and able to script repetitive work (Bash, PowerShell or Python).
• Working knowledge of VPN, firewall and least-privilege access design.
• Experience administering business SaaS platforms at company scale, including licensing and security settings.
• Experience operating in regulated/audited environments (PCI-DSS, ISO 27001 or SOC 2) and producing evidence for auditors.
• Excellent communication and documentation skills in English.

Responsibilities

• Own endpoint management across macOS and Windows — enrolment, disk encryption, OS and patch policy, remote wipe.
• Run identity and access lifecycle end to end: joiner, mover, leaver; SSO and password management; provisioning and revocation.
• Administer core business platforms: licensing, security configuration and cost.
• Run security operations for the internal estate: endpoint protection, patching, phishing defence, and first response.
• Own vendor security reviews and respond to counterparty assessments with reusable answers.
• Produce access reviews, asset records and audit evidence continuously.
• Maintain network and remote-access posture across offices; enforce least privilege.
• Own procurement and hardware lifecycle across regions.
• Support engineers and non-technical teams; set the standard for rapid, clear support.
• Choose and introduce tooling; prefer market solutions based on cost, fit and maintenance.
• Automate provisioning, onboarding, environment setup, and internal reporting.
• Write and own policies, defining what good looks like.

Skills

Endpoint management

macOS and Windows

Identity and access lifecycle

Scripting (Bash/PowerShell/Python)

Security operations

Vendor security reviews

ISO 27001 / PCI-DSS / SOC 2

English communication

Tools

Jamf

Intune

Kandji

Okta

Entra ID

Google Workspace

Bash

PowerShell

Python

VPN

Job description

Xenith is seeking a hands-on IT security and systems engineering leader to own the technology stack across the company’s devices and platforms. You will build scalable processes, set standards, write policies, and drive security postures across finance, product, and operations.

You will manage macOS and Windows fleets, lead identity and access governance, and automate repetitive tasks. This role reports to the Head of Engineering and requires strong communication across time zones.