IAM Security Engineer

About Amartha

At Amartha, we empower micro-businesses across Indonesia, enabling growth and equal prosperity. We've supported over 3.6 million enterpreneurs–mostly women–by disbursing IDR 37 trillion in funding. As we step into 2025, Amartha is evolving into a technology-driven financial ecosystem, expanding our reach in lending, funding, and payments. Through innovation and digital solutions, we aim to enhance accessibility, streamline processes, and create a seamless user experience.

Roles and Responsibilities:

System Integration & Orchestration:

• Design, build, and maintain a centralized identity management system that integrates diverse platforms (SaaS, Legacy On-premise, Cloud Infrastructure).
• Develop end-to-end integration workflows to ensure a seamless "Single Source of Truth" for identities across the organization.
• Implement Single Sign-On (SSO) and automated provisioning across various business units to eliminate login fatigue and manual overhead.

Risk Mitigation & Governance:

• Execute Regular Identity & Access Reviews to identify and remediate "Access Creep," dormant accounts, and unauthorized privilege escalations.
• Maintain the User Access Matrix (UAM), ensuring that every permission is justified by a specific business need.
• Design automated reporting dashboards to monitor identity health and alert on high-risk access anomalies.

Lifecycle Management & Authentication:

• Automate the identity lifecycle (Joiner-Mover-Leaver) to ensure immediate access on day one and instant revocation upon termination.
• Manage and optimize advanced security layers, including Multi-Factor Authentication (MFA) and Conditional Access policies.
• Monitor systems for irregular behavior and set up preventive measures

Regulatory Compliance:

• Ensure all IAM processes strictly adhere to Government Regulation, Industry and International Standards, and the Personal Data Protection (PDP) Law.
• Act as the primary technical point of contact for identity-related audits and regulatory inspections.

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with Cloud Security concepts, principles, and technologies
• Experienced managing Identify & Access tools such as Keycloack, Authentik, Authelia
• Familiar with Cloud Platform such as GCP, AWS 
• Proficiency in scripting (Python, PowerShell, or Go) to automate system integrations.
• Deep understanding of SAML, OAuth2, OIDC, SCIM, and LDAP.
• Fluent in English and Bahasa Indonesia, with the ability to explain security risks to non-technical stakeholders.
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, Nessus, NMap, Metasploit