Senior Security Engineer (PAM) (RM13K)

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Randstad Malaysia is seeking an experienced Senior Security Engineer specializing in Privileged Access Management (PAM) to own deployment, optimization and operational support of the PAM ecosystem. The role focuses on BeyondTrust Password Safe, with migration and integration work across Microsoft Entra ID and Active Directory, leveraging scripting for automation and continuous security operations.

You will collaborate with global IT and cybersecurity teams, provide guidance to junior analysts,

Qualifications

• 8+ years in Cybersecurity with at least 3 years in PAM
• Strong hands-on PAM experience with BeyondTrust Password Safe or CyberArk
• Proficient in Microsoft Entra ID (Azure AD) and on-prem Active Directory architecture

Responsibilities

• Deploy, configure and maintain PAM solutions, especially BeyondTrust Password Safe
• Assist migration of legacy privileged accounts into BeyondTrust vault and optimize PAM workflows
• Manage integrations between BeyondTrust, AD and Entra ID, including OU structures, GPOs and Kerberos
• Develop PowerShell or Python scripts using BeyondTrust REST APIs for automation
• Investigate and resolve complex security incidents involving endpoint compromise and privilege escalation
• Perform platform upgrades, patching and health checks for reliability
• Provide Level 3 escalation support and mentor junior analysts

Skills

PAM

BeyondTrust Password Safe

Microsoft Entra ID

Active Directory

Kerberos

PowerShell

Python

IAM migrations

Education

Bachelor's Degree in Computer Science/IT

Tools

BeyondTrust Password Safe

CyberArk

Job description

about the company

Our client is a globally established technology-driven organisation with an extensive international presence and operations across multiple regions, including APAC, EMEA and the US. The organisation operates in a highly technology-dependent environment, placing strong emphasis on IT security, operational excellence and enterprise-wide cybersecurity governance. With globally integrated IT functions, the company offers an opportunity to work alongside international teams on security infrastructure and critical technology initiatives

about the job

We are seeking an experienced Senior Security Engineer (Privileged Access Management) to take ownership of the engineering, optimisation and operational support of the organisation's Privileged Access Management (PAM) ecosystem.

The successful candidate will play a key role in deploying, configuring and maintaining PAM solutions, particularly BeyondTrust Password Safe, while supporting privileged account migration, identity infrastructure integration and security incident resolution.

This position requires strong hands-on expertise in PAM technologies, Microsoft Active Directory and Microsoft Entra ID, alongside the ability to automate security operations through scripting and API integrations.

Key Responsibilities:

• Deploy, configure and maintain Privileged Access Management solutions, particularly BeyondTrust Password Safe.
• Support the migration of legacy privileged accounts into the BeyondTrust vault and optimise existing PAM workflows.
• Manage integrations between BeyondTrust, Active Directory and Microsoft Entra ID, including OU structures, Group Policy Objects (GPOs) and Kerberos.
• Develop and deploy PowerShell or Python scripts using BeyondTrust REST APIs to automate bulk onboarding, password rotation and session monitoring alerts.
• Investigate, troubleshoot and resolve complex security incidents involving endpoint compromise and privilege escalation.
• Perform platform upgrades, patching, maintenance and regular health checks to ensure service reliability.
• Provide Level 3 escalation support for complex technical issues that cannot be resolved by Level 2 support.
• Provide technical guidance and mentorship to junior security analysts on PAM best practices and incident handling.
• Collaborate with global IT, cybersecurity and infrastructure teams to ensure effective service delivery.

About the Ideal Candidate

• Bachelor's Degree in Computer Science, Information Technology or a related discipline.
• Minimum 8 years of experience in Cybersecurity, with at least 3 years of dedicated Privileged Access Management experience.
• Strong hands-on experience with BeyondTrust Password Safe or equivalent PAM solutions such as CyberArk.
• Strong knowledge of Microsoft Entra ID (Azure AD) and on-premises Active Directory architecture.
• Advanced understanding of Kerberos, LDAP, GPO, Service Principals, Managed Identities and App Registrations.
• Experience participating in large-scale IAM/PAM migration projects, including tool-to-tool or on-premises-to-cloud migrations, is highly preferred.
• Experience in IT Service Management, security product ownership or service delivery within security-critical environments.
• Strong communication skills and the ability to collaborate effectively with international stakeholders.
• Previous experience supporting global environments across US, EMEA and APAC, including 24/7 operational environments, is preferred.

about the manager/team

You will report directly to the Head of Workplace Operations & IT Security and work closely with a globally connected IT and Cybersecurity function.

The role involves close collaboration with internal stakeholders across IT Infrastructure, Cybersecurity, Enterprise Architecture, Major Incident Management, Call Centre and Site Services, as well as regional and global IT teams across APAC and other international locations.

This is an individual contributor position offering the opportunity to take technical ownership of critical PAM infrastructure while contributing to global security operations and continuous service improvement.

experience

5 years

skills

PAM, BeyondTrust Password Safe, Microsoft Entra ID,

qualifications

8+ years in Cybersecurity, with 3+ years of dedicated PAM experience in BeyondTrust Password Safe or equivalent PAM solutions i.e. CyberArk

education

Bachelor Degree