Identity Management Engineer

Grab; Petaling Jaya; On-site; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex benefits

Parental leave

Birthday leave

LASA volunteering leave

Grabber Assistance Programme

FlexWork hours

Job summary

Grab is seeking an experienced Identity & Access Management professional focused on Privileged Access Management. You will manage privileged access across Grab's enterprise systems, operate CyberArk PAM, and drive automation to streamline onboarding and credential management.

You will collaborate with security, risk and compliance teams, support audits, and work with global stakeholders to strengthen IAM controls while maintaining high availability and security across cloud and on-prem

Qualifications

• 4–6 years of hands-on IAM/PAM experience.
• Deep hands-on CyberArk expertise including Privilege Cloud, SWS, Remote Access and Conjur.
• Experience implementing CyberArk across applications, infrastructure and cloud environments.
• Hands-on with leading IAM platforms such as JumpCloud, Okta or Azure AD.
• Strong PAM principles: least privilege, just-in-time access, credential vaulting and session monitoring.
• Solid IAM concepts: identity lifecycle, authentication, SSO and access governance.
• Experience collaborating with security, risk and compliance teams, including audits.
• Proactive, self-driven with strong communication across globally distributed teams and a passion for automation.

Responsibilities

• Manage privileged access provisioning and deprovisioning across Grab's enterprise systems.
• Operate and optimize the CyberArk PAM platform ensuring stability, performance and security.
• Develop automation scripts and integrations to improve onboarding, credential management and PAM efficiency.
• Support audits by providing evidence, logs and ensuring controls are effective.
• Drive periodic access reviews for privileged accounts to maintain compliance.
• Handle identity incidents and service requests with timely resolutions.
• Collaborate with cross-functional teams and stakeholders to enhance IAM/PAM implementations.

Skills

IAM/PAM experience

CyberArk

Privilege Cloud

SWS

Remote Access

Conjur

JumpCloud

PAM principles

IAM concepts

Automation scripting

Tools

CyberArk

JumpCloud

Okta

Azure AD

Job description

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Job Description

Get to Know the Team

Grabber Technology Solutions (GTS) aims to be a technology leader that provides predictive and seamless experiences to all Grab employees (Grabbers). We are a diverse team of technology practitioners looking to out-serve Grabbers with positive, personalised IT experiences. We are looking for individuals with similar customer-centric and innovative values to join our growing team

The Identity Management team is responsible for managing identities and privileged access across Grab's enterprise infrastructure. The team maintains core identity and access solutions, helping to secure Grab's privileged access landscape.

Get to Know the Role

In this position, you'll be supporting Grab's enterprise infrastructure with an emphasis on Identity and Privileged Access Management. The Identity Management team at Grab is committed to overseeing access to Grab's enterprise applications and safeguarding access to vital systems and sensitive data. Our mission is “Empowering Grabbers with secure, seamless access to systems and data; simplifying productivity and creating time for what matters”.

Our responsibilities include ongoing monitoring, auditing, and regular reviews to uphold a robust access control environment. A mindset geared towards optimisation and automation is essential, along with the ability to work independently and foster relationships with stakeholders throughout Grab.

The Critical Tasks You Will Perform

Privileged Access Management & Engineering

• Implement and operate CyberArk solutions including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.
• Configure safes, platforms, credential rotation, session monitoring and access workflows to enforce least privilege and secure privileged access.
• Onboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.

Integration, Automation & Governance

• Develop automation - scripts or integrations to improve onboarding, credential management and overall PAM efficiency.
• Support audits and compliance by providing access evidence, logs and ensuring controls are operating effectively.
• Proactively identify gaps in privileged access coverage and drive improvements across the environment.
• Identity Operations
  • Manage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.
  • Configure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.
  • Provision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.
  • Drive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.
  • Develop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.
  • Support audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.
  • Manage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.
  • Develop and maintain documentation, including best practices, technical guides, and standard operating procedures.

Qualifications

What Essential Skills You Will Need

• 4–6 years of strong hands‑on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.
• Proven, deep hands‑on experience with CyberArk (not just familiarity or exposure), including:
  • Privilege Cloud
  • Secure Web Sessions (SWS)
  • Remote Access
  • Conjur (Secrets Management)
  • Experience configuring safes, platforms, policies, credential rotation and session monitoring
  • Use of CyberArk APIs for plugins, automations and integrations.
• Demonstrated experience implementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.
• Hands‑on experience with a leading Identity platform such as JumpCloud (preferred), Okta, Azure AD or similar.
• Strong understanding of PAM principles (least privilege, just‑in‑time access, credential vaulting, session monitoring, segregation of duties).
• Solid foundation in IAM concepts including identity lifecycle management, authentication, authorisation, SSO and access governance.
• Experience working with security, risk and compliance teams, including supporting audits and interactions with auditors.
• Strong problem‑solving skills with the ability to automate and troubleshoot using scripting (Python, Bash, PowerShell or similar).
• Experience contributing to IAM/PAM implementations or transformation initiatives, from design through execution.
• Strong ownership mindset — proactive, self‑driven, and willing to take responsibility end‑to‑end.
• Excellent communication and collaboration skills, with experience working with globally distributed, cross‑functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.

Additional Information

Life at Grab

We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
• Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.