Lead Analyst, Identity & Access Management

AIA Digital+; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Alibaba Cloud is seeking a skilled IAM professional to operate RAM services, manage user access lifecycles, and support audit activities. The role collaborates with cloud, infrastructure, and security teams to maintain proper access governance across hybrid environments.

Qualifications include 3-4 years in IAM or cloud operations, hands-on RAM experience, and scripting proficiency. Strong English communication and analytical skills are essential for success in this role.

Qualifications

• 3-4 years in Identity & Access Management or cloud operations.

Responsibilities

• Operate and support Alibaba Cloud IAM RAM services (users, roles, groups, policies).
• Manage access lifecycle activities for cloud accounts and resources.
• Administer AccessKey lifecycle controls and risk mitigation.
• Support IAM incidents and provide technical analysis with cross-team coordination.
• Assist with audits, access reviews, and maintain access inventories.

Skills

IAM operations

Access lifecycle

Scripting

English communication

Analytical skills

Education

Bachelor in IT/Security

Tools

Alibaba Cloud RAM

Shell

PowerShell

Python

Job description

Responsible for day-to-day Identity and Access Management (IAM) operations for Alibaba Cloud (AliCloud) environments, ensuring secure, compliant, and efficient access to cloud resources.

The role focuses on RAM (Resource Access Management) operations, access lifecycle management, and audit support, while collaborating with enterprise identity platforms and infrastructure teams to maintain consistent access governance across hybrid environments.

Roles and Responsibilities:

• Operate and support AliCloud IAM (RAM) services, including users, roles, groups, and policies, to ensure compliance with security standards and operational requirements.
• Manage access lifecycle activities for AliCloud accounts and resources, including provisioning, modification, deprovisioning, and privileged access support.
• Administer AccessKey lifecycle controls, including issuance tracking, rotation support, exception handling, and risk mitigation in accordance with security policies.
• Support IAM incident and request resolution, performing technical analysis and coordinating with cloud, infrastructure, and security teams to resolve access-related issues.
• Assist with audit, access review, and compliance activities by maintaining accurate access inventories, evidence, and documentation (e.g. ActionTrail-based records).
• Contribute to operational improvement initiatives by identifying process gaps and applying basic automation or standardization using scripting.
• Maintain IAM operational documentation, including procedures, controls, and runbooks.
• 3-4 years' experience in Identity & Access Management, Information Security, or cloud operations.
• Hands-on experience with Alibaba Cloud IAM (RAM) or similar cloud IAM platforms.
• Exposure to cloud access lifecycle management and access governance processes.
• Working knowledge of Linux/Unix, Windows, or database platforms from an access control perspective.
• Understanding of enterprise IAM or cloud identity platforms (e.g. Microsoft Entra ID / Azure AD).
• Ability to write or maintain basic scripts using Shell, PowerShell, or Python for automation or reporting tasks.
• Strong analytical and troubleshooting skills.
• Good written and verbal communication skills in English.
• Degree in Information Technology, Information Security, or related disciplines.