Our responsibilities include ongoing monitoring, auditing, and regular reviews to uphold a robust access control environment. A mindset geared towards optimisation and automation is essential, along with the ability to work independently and foster relationships with stakeholders throughout Grab. If you believe you have what it takes, we'd love to hear from you!
The Critical Tasks You Will Perform
Privileged Access Management & Engineering
Implement and operate CyberArk solutions including Privilege Cloud, Secure Web Sessions (SWS), Remote Access, Conjur and Secure Cloud Access.
Configure safes, platforms, credential rotation, session monitoring and access workflows to enforce least privilege and secure privileged access.
Onboard applications, infrastructure and cloud environments into CyberArk, ensuring alignment with PAM standards.
Integration, Automation & Governance
Develop automation - scripts or integrations to improve onboarding, credential management and overall PAM efficiency.
Support audits and compliance by providing access evidence, logs and ensuring controls are operating effectively.
Proactively identify gaps in privileged access coverage and drive improvements across the environment.
Identity Operations
Manage incidents and service requests related to Identity services, ensuring timely resolution and minimal disruption to operations.
Configure, support, and maintain the CyberArk Privileged Access Management (PAM) platform, ensuring stability, performance, and security.
Provision and deprovision privileged access in accordance with the principles of least privilege, segregation of identities, and separation of duties.
Drive periodic access reviews for privileged accounts within CyberArk, ensuring ongoing compliance and appropriate access levels.
Develop custom plugins and integrations within CyberArk to extend functionality and enable interoperability with other enterprise systems and platforms.
Support audits and forensic investigations by supplying compliance evidence, access logs, and other relevant data.
Manage and monitor ticket queues, develop and track KPIs/KRIs to provide insights, and identify opportunities for operational improvements.
Develop and maintain documentation, including best practices, technical guides, and standard operating procedures.
What Essential Skills You Will Need
4–6 years of strong hands-on experience in Identity & Access Management (IAM/PAM), with a primary focus on Privileged Access Management.
Proven, deep hands-on experience with CyberArk (not just familiarity or exposure), including:
Privilege Cloud
Secure Web Sessions (SWS)
Remote Access
Conjur (Secrets Management)
Experience configuring safes, platforms, policies, credential rotation and session monitoring
Use of CyberArk APIs for plugins, automations and integrations.
Demonstrated experience implementing, onboarding and operating CyberArk across applications, infrastructure and cloud environments.
Hands-on experience with a leading Identity platform such as JumpCloud (preferred), Okta, Azure AD or similar.
Strong understanding of PAM principles (least privilege, just-in-time access, credential vaulting, session monitoring, segregation of duties).
Solid foundation in IAM concepts including identity lifecycle management, authentication, authorisation, SSO and access governance.
Experience working with security, risk and compliance teams, including supporting audits and interactions with auditors.
Strong problem-solving skills with the ability to automate and troubleshoot using scripting (Python, Bash, PowerShell or similar).
Experience contributing to IAM/PAM implementations or transformation initiatives, from design through execution.
Strong ownership mindset — proactive, self-driven, and willing to take responsibility end-to-end.
Excellent communication and collaboration skills, with experience working with globally distributed, cross-functional teams, and the ability to clearly articulate technical concepts to diverse stakeholders.
Life at Grab
We care about your well-being at Grab, here are some of the global benefits we offer:
We have your back with Term Life Insurance and comprehensive Medical Insurance.
With GrabFlex, create a benefits package that suits your needs and aspirations.
Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours
What We Stand For At Grab
We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.
