Identity & Security Engineer

UNAVAILABLE; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Danone is seeking an IT & Data Engineer specializing in Privileged Access Management based in Malaysia. You will operate and enhance the global PAM service, ensuring secure privileged access across domains, and collaborate with infrastructure and security teams to drive automation and governance.

The role emphasizes deploying PAM across Danone environments, onboarding new platforms, and supporting Tier-0 security operations to protect critical assets while aligning with cybersecurity standards.

Qualifications

• 5+ years in IAM, cybersecurity, or security operations.
• Hands-on experience with PAM and privileged accounts.
• Experience supporting enterprise security or identity services.
• Experience with large enterprise environments and IT services with SLAs.

Responsibilities

• Operate and support Danone's global Privileged Access Management service.
• Rollout PAM across environments and onboard new platforms and use cases.
• Support Tier-0 security operations and critical identity assets.
• Contribute to governance, compliance, and audit readiness.
• Identify opportunities to improve service quality and automation.

Skills

IAM

Active Directory

PAM

Cybersecurity

Enterprise IT

Tools

Active Directory

Entra ID

PKI platforms

Privileged access tools

Job description

Short Intro and About the Job

Danone Business Services is seeking for IT & DataEngineer, based in Malaysia. With our global presence, brands and business and our mission of bringing health through food to as many people as possible; we believe that people growth is a key asset to reach a sustainable business performance.To succeed in this journey, we're looking for the right talent and personalities eager to bring their energy and ideas to a meaningful project. Take this opportunity to GROW together and experience a culture that empowers you to express your ideas and share what you're passionate about! TheEngineer plays a critical role in protecting Danone's most sensitive systems, identities, and administrative access pathways. Reporting to the Global Privileged Access Manager, the role is responsible for operating, enhancing, and supporting the global Privileged Access Management service, ensuring that privileged access is secure, controlled, auditable, and aligned with Danone's cybersecurity standards.

The role combines technical expertise, operational excellence, and service delivery to support the deployment of privileged access controls across all Danone domains, business units, factories, cloud environments, applications, and infrastructure platforms. The individual will work closely with Infrastructure, Security, OT, Application teams to ensure privileged accounts and administrative access are managed consistently and sustainably throughout their lifecycle.

The successful candidate will contribute to Danone's long-term PAM strategy by onboarding new systems, improving operational processes, increasing automation, supporting Tier-0 administration, and ensuring privileged access controls remain effective as the organization continues its digital transformation journey.

Main Responsibilities

Deliver Privileged Access Management ServicesOperate and support the day-to-day activities of Danone's global Privileged Access Management service. The role ensures privileged access requests are processed efficiently, controls are applied consistently, and users receive secure access to perform administrative activities without introducing unnecessary risk.

Support Enterprise PAM DeploymentSupport the rollout and adoption of privileged access controls across all Danone environments. As part of Danone's PAM transformation journey, the PAM Engineer will work with technology teams to onboard new platforms and access use cases into the PAM ecosystem, ensuring privileged account management becomes standardized globally.

Support Tier-0 Security OperationsThe role is a key contributor to the protection of Danone's most sensitive identity and infrastructure assets. Working alongside Tier-0 administrators, security engineers, and infrastructure teams, the PAM Engineer supports the implementation and maintenance of controls protecting critical services such as Active Directory, Domain Controllers, Entra ID, PKI platforms, and privileged administration environments.

Drive Security, Compliance & GovernanceThe PAM Engineer contributes to maintaining the integrity, effectiveness, and sustainability of privileged access controls across the organization. The role actively supports governance processes and helps ensure compliance with internal cybersecurity standards, audit requirements, and regulatory obligations.

Improve Service Efficiency & AutomationThe role continuously seeks opportunities to improve service quality, user experience, and operational efficiency.

About You

Professional Experience

• 5+ years of experience in Identity & Access Management, Cybersecurity, Infrastructure Services, or Security Operations.
• Possess hands-on Active Directory, PAM technical ability with a cybersecurity mindset.
• Experience supporting enterprise security or identity services.
• Experience managing privileged, administrative, or service accounts.
• Experience working within large enterprise environments.
• Experience supporting operational IT services with defined SLAs and governance processes.

Leadership & Behavioral Competencies

• Proactive
• Strong ownership and accountability
• Service-oriented mindset
• Attention to detail
• Analytical and Problem-solving capabilities
• Customer focus
• Collaboration across global teams
• Ability to balance security and operational requirements
• Continuous improvement mindset
• Strong verbal and written communication skills
• Good command of English to effectively liaise with global teams

About Us, We offer and What's next

Danone is a world leading food company built on three business lines; Specialized Nutrition, Waters and Fresh Dairy Products. Danone’s mission is bringing health through food to as many people as possible and we want to invite people to join the movement for a healthier world. We recognize the power people have to impact the world through their daily choices. Each time we eat and drink, we vote for the world we want to live in. We believe a healthy body needs healthy food. And healthy food needs a healthy planet, and this is what our new signature One Planet One Health embodies.

Danone is committed to create and live an inclusive & diverse environment, which will drive our growth as a business, as teams, as members of communities & as individuals. Valuing diversity is recognizing and respecting human differences and similarities. Our aim is to ensure that all employees and applicants are given equal opportunity and that our organization is representative of our consumers and society.

We commit to foster an inclusive working environment where we celebrate all types of diversity, both visible and invisible, which includes age, race, gender, nationality, disability, background, education, religion, beliefs, thinking style, perspectives and sexual orientation.

We believe that our differences will make the difference.

For more information, please visit our website at https://careers.danone.com/sea/en/home.html

What's nextWilling to start your meaningful journey?