Zero-Trust IAM Engineer (Hybrid Cloud)

HAVI België; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid Working

Professional Growth

Inclusive Environment

Job summary

HAVI TechHub is seeking a Security Engineer (Identity & Access Management) to steer our IAM program across hybrid cloud and on‑prem environments. You will design governance frameworks, implement scalable identity architectures, and collaborate with security teams to reduce risk while enabling business agility.

The ideal candidate brings 5+ years in cybersecurity/IAM, hands-on experience with Azure AD, AWS IAM, Okta, and PAM tools, and a strong grasp of SAML, OIDC, OAuth.

Qualifications

• 5+ years in cybersecurity or identity/access management roles, with at least 3 years in IAM.
• Hands-on with enterprise identity platforms such as Azure AD, AWS IAM, Okta or Ping Identity.
• Strong understanding of SAML 2.0, OpenID Connect, OAuth 2.0, Kerberos, LDAP.
• Experience with PAM solutions: CyberArk, BeyondTrust, Azure PIM.
• Scripting/automation (PowerShell, Python, Terraform) for IAM provisioning.
• Knowledge of cloud security platforms and IAM integrations (Defender, Sentinel, AWS Security Hub).
• Understanding of zero-trust, MFA, conditional access, and identity threat detection.
• Strong analytical, communication, and documentation skills.

Responsibilities

• Design, implement, and maintain robust identity governance frameworks across hybrid environments.
• Lead IAM initiatives across on-prem and cloud, aligning with security teams.
• Architect scalable zero‑trust identity architectures and governance models.
• Collaborate with infrastructure, application, cloud, and OT security teams.

Skills

IAM expertise

Azure AD / Entra ID

AWS IAM

OpenID Connect / OAuth 2.0

SAML 2.0

PAM solutions

Scripting & automation

Cloud security platforms

Zero trust / MFA

Communication & documentation

Education

Bachelor's degree in information security / Computer Science / Engineering

Tools

Microsoft Entra ID (Azure AD)

AWS IAM

Okta

Ping Identity

CyberArk

BeyondTrust

Azure PIM

PowerShell

Python

Terraform

Job description

HAVI TechHub is seeking a Security Engineer (Identity & Access Management) to steer our IAM program across hybrid cloud and on‑prem environments. You will design governance frameworks, implement scalable identity architectures, and collaborate with security teams to reduce risk while enabling business agility.

The ideal candidate brings 5+ years in cybersecurity/IAM, hands-on experience with Azure AD, AWS IAM, Okta, and PAM tools, and a strong grasp of SAML, OIDC, OAuth.