Owns enterprise security engineering across identity, cloud, messaging, PKI, and Zero Trust architecture. Responsible for security design, governance enforcement, advanced incident handling, and strategic hardening initiatives.
Key Responsibilities
- Design and govern enterprise identity security architecture
- Lead Entra ID and federation security strategy
- Architect and enforce Zero Trust policies
- Secure Azure Landing Zone and hybrid connectivity
- Govern ExpressRoute and Private Link data flows
- Review and approve Conditional Access framework
- Lead PKI governance and certificate lifecycle strategy
- Define Microsoft 365 security architecture standards
- Oversee email security, encryption, and RMS controls
- Lead advanced threat investigations and root cause analysis
- Coordinate security incident response at enterprise level
- Ensure compliance with IT Security Governance Framework
- Define hardening baselines for identity and cloud systems
- Manage CyberArk EPM & PAM and custom connector
- Provide executive-level security reporting
- Drive security improvement roadmap initiatives
- Support audit reviews and compliance assessments
- Mentor L1 and L2 security team members
- Validate new workload onboarding against Zero Trust standards
- Conduct periodic security posture assessments
- Ensure alignment with ISMS and governance policies
- Any other ad-hoc duties as assigned by supervisors
Required Skills
- Active Directory (Multi-Forest), ADFS, Microsoft Entra ID, Azure AD B2C
- Microsoft Identity Manager, Azure AD Connect
- LDAP, SAML, OAuth, OIDC, WS-Fed
- Azure Landing Zone, Hub-and-Spoke Network Model
- ExpressRoute, Azure Firewall, Private Link & Private Endpoints
- Conditional Access Enforcement & Zero Trust Architecture
- Microsoft 365 Security Architecture & Exchange Online Security
- Trend Micro Email & Cloud App Security, Microsoft RMS
- CyberArk EPM & PAM
- DigiCert Managed PKI, Enterprise Certificate Lifecycle Governance
- Email Encryption & Digital Signing
- Azure Monitor, Log Analytics, Microsoft Defender
- Advanced Security Analytics
- Preferred: CISSP, AZ-500, SC-300, SC-200
Interested applicants, please email your resume to Douglas Tan Yu Feng
Email: [Confidential Information]
CEI Reg No: R26160004
EA Licence No: 99C4599
Recruit Express Pte Ltd
