{"id":3741838,"url":"https://alion.io/job/grab-identity-management-engineer-2","title":"Identity Management Engineer","company":{"id":158,"name":"Grab","domain":"grab.com","url":"https://alion.io/company/grab","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":57,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Petaling Jaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-11-04T10:17:12Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T02:42:01Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Grab and Our Workplace\nGrab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.\n Get to Know the Team\nGrabber Technology Solutions (GTS) aims to be a technology leader that provides predictive and seamless experiences to all Grab employees (Grabbers). We are a diverse team of technology practitioners looking to out-serve Grabbers with positive, personalised IT experiences. We are looking for individuals with similar customer-centric and innovative values to join our growing team\nThe Identity Management team is responsible for managing identities and privileged access across Grab's enterprise infrastructure. The team maintains core identity and access solutions, helping to secure Grab's privileged access landscape.\nGet to Know the Role\nIn this position, you'll be supporting Grab's enterprise infrastructure with an emphasis on Identity and Privileged Access Management. The Identity Management team at Grab is committed to overseeing access to Grab's enterprise applications and safeguarding access to vital systems and sensitive data. Our mission is “Empowering Grabbers with secure, seamless access to systems and data; simplifying productivity and creating time for what matters”.\nOur responsibilities include ongoing monitoring, auditing, and regular reviews to uphold a robust access control environment. A mindset geared towards optimisation and automation is essential, along with the ability to work independently and foster relationships with stakeholders throughout Grab. If you believe you have what it takes, we'd love to hear from you!\nThe Critical Tasks You Will Perform\nPrivileged Access Management & Engineering\nImplement and operate CyberArk solutions including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.\nConfigure safes, platforms, credential rotation, session monitoring and access workflows to enforce least privilege and secure privileged access.\nOnboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.\nIntegration, Automation & Governance\nDevelop automation - scripts or integrations to improve onboarding, credential management and overall PAM efficiency.\nSupport audits and compliance by providing access evidence, logs and ensuring controls are operating effectively.\nProactively identify gaps in privileged access coverage and drive improvements across the environment.\n Identity OperationsManage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.\nConfigure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.\nProvision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.\nDrive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.\nDevelop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.\nSupport audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.\nManage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.\nDevelop and maintain documentation, including best practices, technical guides, and standard operating procedures.\n\n What Essential Skills You Will Need\n 4-6 years of strong hands-on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.\n Proven, deep hands-on experience with CyberArk (not just familiarity or exposure), including:Privilege Cloud\nSecure Web Sessions (SWS)\nRemote Access\nConjur (Secrets Management)\nExperience configuring safes, platforms, policies, credential rotation and session monitoring\nUse of CyberArk APIs for plugins, automations and integrations. \n\nDemonstrated experience implementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.\nHands-on experience with a leading Identity platform such as JumpCloud (preferred), Okta, Azure AD or similar.\nStrong understanding of PAM principles (least privilege, just-in-time access, credential vaulting, session monitoring, segregation of duties).\nSolid foundation in IAM concepts including identity lifecycle management, authentication, authorisation, SSO and access governance.\nExperience working with security, risk and compliance teams, including supporting audits and interactions with auditors.\nStrong problem-solving skills with the ability to automate and troubleshoot using scripting (Python, Bash, PowerShell or similar).\nExperience contributing to IAM/PAM implementations or transformation initiatives, from design through execution.\nStrong ownership mindset - proactive, self-driven, and willing to take responsibility end-to-end.\nExcellent communication and collaboration skills, with experience working with globally distributed, cross-functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.\n Life at Grab\nWe care about your well-being at Grab, here are some of the global benefits we offer:\nWe have your back with Term Life Insurance and comprehensive Medical Insurance.\nWith GrabFlex, create a benefits package that suits your needs and aspirations.\nCelebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave\nWe have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.\nBalancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours\nWhat We Stand For At Grab\nWe are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.","description_format":"text","description_chars":6682,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Delivery","Ride Hailing","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-11-04T11:59:16Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-05T04:31:29Z"},"pay":null,"html_url":"https://alion.io/job/grab-identity-management-engineer-2","json_url":"https://alion.io/job/grab-identity-management-engineer-2.json","meta":{"generated_at":"2026-11-05T04:31:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5619,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":158},"rest":"https://alion.io/mcp/rest/get_company?id=158"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrab-identity-management-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrab-identity-management-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrab-identity-management-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grab-identity-management-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrab-identity-management-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3741838}},{"tool":"search_jobs","arguments":{"company":"grab.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3741838},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}