Security Engineer (IAM)

HAVI Belgium; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Hybrid working 3/2

Training opportunities

Inclusive culture

Job summary

HAVI TechHUB in Kuala Lumpur seeks a Security Engineer (Identity & Access Management) to lead identity security across hybrid cloud and on‑prem environments. You will design, implement and govern IAM solutions to protect critical assets and enable secure digital transformation.

The role requires hands‑on expertise with Azure AD, AWS IAM, Okta or Ping Identity, experience with SAML, OIDC, OAuth, and a proactive, collaborative mindset in a fast‑growing supply chain tech team.

Qualifications

• 5+ years in cybersecurity or IAM roles, with at least 3 years in IAM.
• Hands-on with enterprise identity platforms like Entra ID, AWS IAM, Okta, Ping Identity.
• Strong knowledge of SAML 2.0, OpenID Connect, OAuth 2.0, Kerberos, LDAP.
• Experience with PAM solutions (CyberArk, BeyondTrust, Azure PIM).

Responsibilities

• Design, implement and maintain identity governance frameworks.
• Collaborate with infrastructure, application, cloud and OT security teams.
• Architect scalable identity solutions and zero-trust identities.
• Translate technical concepts for non-technical stakeholders.

Skills

IAM expertise

SAML/OIDC/OAuth

PAM solutions

Scripting/Automation

Cloud IAM

Zero trust

MFA & CA

InfoSec knowledge

Documentation skills

Education

Bachelor's degree in CS/InfoSec

Tools

Microsoft Entra ID (Azure AD)

AWS IAM

Okta

Ping Identity

Azure PIM

Job description

Full/Part-time: Full time

Job Category: Information Technology/Digital

City: Kuala Lumpur

At HAVI, since 1974, we haven't just been in the business of supply chain; we’ve been in the business of reimagining connections between people and the products they love to create a better future.

Joining the TechHUB is an opportunity to be part of the transformation journey towards reimagining the future of Supply Chain Technology!

THE WORK

…the chance to embark on a groundbreaking startup journey set to transform global supply chain results. Here, you’ll have the opportunity to make your mark by innovating, creating and driving revolutionary projects that reshape the tech and supply chain world. As you steer the change needed for the company’s growth, your work will be purposeful, driving value and bringing smiles to everyday life.

THE PEOPLE

…to work with a diverse mix of talent – an exceptional team of experts, trailblazers and problem solvers from around the globe. Together, you’ll seamlessly work across borders to achieve what you seem impossible.

THE ENVIRONMENT

…to thrive in a supportive yet challenging environment where innovation to redefine what’s possible is our commitment. Experience a culture that encourages autonomy, flexibility and empowerment, and embrace a collaborative mindset that prioritizes teamwork and experimentation – essential for shaping the future of Supply Chain Technology!

About The Role

We are seeking a Security Engineer (Identity & Access Management) to lead our identity security initiatives across hybrid cloud and on-premise environments. This role is designed for an experienced IAM practitioner who combines deep technical expertise with the ability to architect scalable identity solutions. The successful candidate will design, implement, and maintain robust identity governance frameworks while collaborating with infrastructure, application, cloud, and OT security teams. We are looking for someone who is strategic, hands‑on, and passionate about building zero‑trust identity architectures.

The Skills

• 5+ years of experience in cybersecurity or identity/access management roles, with at least 3 years focused on IAM.
• Hands‑on expertise with enterprise identity platforms: Microsoft Entra ID (Azure AD), AWS IAM, Okta, Ping Identity, or similar.
• Strong understanding of identity protocols: SAML 2.0, OpenID Connect, OAuth 2.0, Kerberos, LDAP.
• Experience with Privileged Access Management (PAM) solutions (e.g., CyberArk, BeyondTrust, Azure PIM).
• Proficiency in scripting/automation (PowerShell, Python, Terraform) for identity provisioning and management.
• Working knowledge of cloud security platforms (Microsoft Defender, Sentinel, AWS Security Hub) and their IAM integrations.
• Understanding of security concepts including zero trust architecture, MFA, conditional access, and identity threat detection.
• Strong analytical, communication, and documentation skills with ability to translate technical concepts for non‑technical stakeholders.
• Bachelor's degree in information security, Computer Science, Engineering, or equivalent practical experience.

The Benefits

• The People! The Work! The Environment!
• Competitive Salary: we offer a salary that reflects your experience, and expertise
• Work-Life Balance: Hybrid Working — 3 days in office, 2 days from home
• Professional Growth: access to ongoing training.
• Inclusive Environment: we prioritize diversity and inclusion, ensuring everyone feels welcome and valued.

In return, HAVI TechHUB asks…

BE ADAPTABLE

…and swifty adjust to new challenges, diverse mindsets and disruptive approaches as you navigate the ever‑evolving supply chain technology landscape.

BE A SOLUTION SEEKER

…and embrace challenges creatively, think critically and drive positive change in supply chain technology.

BE DRIVEN

…and demonstrate initiative and accountability in pursuing innovative solutions and strategies to shape the future of supply chain technology.

Equal Opportunity Employer: HAVI TechHUB is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, disability, age, parenthood, pregnancy or any other basis protected by applicable law, and will not be discriminated against.