Identity Management Engineer

About Grab and Our Workplace

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Get to Know the Team

Grabber Technology Solutions (GTS) aims to be a technology leader that provides predictive and seamless experiences to all Grab employees (Grabbers). We are a diverse team of technology practitioners looking to out-serve Grabbers with positive, personalised IT experiences. We are looking for individuals with similar customer-centric and innovative values to join our growing team

The Identity Management team is responsible for managing identities and privileged access across Grab's enterprise infrastructure. The team maintains core identity and access solutions, helping to secure Grab's privileged access landscape.

Get to Know the Role

In this position, you'll be supporting Grab's enterprise infrastructure with an emphasis on Identity and Privileged Access Management. The Identity Management team at Grab is committed to overseeing access to Grab's enterprise applications and safeguarding access to vital systems and sensitive data. Our mission is “Empowering Grabbers with secure, seamless access to systems and data; simplifying productivity and creating time for what matters”.

Our responsibilities include ongoing monitoring, auditing, and regular reviews to uphold a robust access control environment. A mindset geared towards optimisation and automation is essential, along with the ability to work independently and foster relationships with stakeholders throughout Grab. If you believe you have what it takes, we'd love to hear from you!

The Critical Tasks You Will Perform

Privileged Access Management & Engineering

• Implement and operate CyberArk solutions including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.
• Configure safes, platforms, credential rotation, session monitoring and access workflows to enforce least privilege and secure privileged access.
• Onboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.

Integration, Automation & Governance

• Develop automation - scripts or integrations to improve onboarding, credential management and overall PAM efficiency.
• Support audits and compliance by providing access evidence, logs and ensuring controls are operating effectively.
• Proactively identify gaps in privileged access coverage and drive improvements across the environment.

• Identity Operations
  • Manage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.
  • Configure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.
  • Provision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.
  • Drive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.
  • Develop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.
  • Support audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.
  • Manage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.
  • Develop and maintain documentation, including best practices, technical guides, and standard operating procedures.

What Essential Skills You Will Need

• 4–6 years of strong hands-on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.
• Proven, deep hands-on experience with CyberArk (not just familiarity or exposure), including:
  • Privilege Cloud
  • Secure Web Sessions (SWS)
  • Remote Access
  • Conjur (Secrets Management)
  • Experience configuring safes, platforms, policies, credential rotation and session monitoring
  • Use of CyberArk APIs for plugins, automations and integrations.
• Demonstrated experience implementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.
• Hands-on experience with a leading Identity platform such as JumpCloud (preferred), Okta, Azure AD or similar.
• Strong understanding of PAM principles (least privilege, just-in-time access, credential vaulting, session monitoring, segregation of duties).
• Solid foundation in IAM concepts including identity lifecycle management, authentication, authorisation, SSO and access governance.
• Experience working with security, risk and compliance teams, including supporting audits and interactions with auditors.
• Strong problem-solving skills with the ability to automate and troubleshoot using scripting (Python, Bash, PowerShell or similar).
• Experience contributing to IAM/PAM implementations or transformation initiatives, from design through execution.
• Strong ownership mindset — proactive, self-driven, and willing to take responsibility end-to-end.
• Excellent communication and collaboration skills, with experience working with globally distributed, cross-functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.

Life at Grab

We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
• Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.