Senior / Security Engineer / IAM Engineer / Enterprise Tools & Observability Engineer

Responsibilities

. Design and govern enterprise identity security architecture

. Administer Active Directory and ADFS operations

. Maintain Entra ID configurations and policies

. Monitor Azure AD Connect synchronization health

. Support SSO integrations (SAML, OAuth, OIDC)

. Enforce and troubleshoot Conditional Access policies

. Manage MFA enrollment and troubleshooting

. Monitor Azure Firewall logs and alerts

. Validate ExpressRoute security posture

. Review Private Endpoint and Private Link configurations

. Monitor Microsoft 365 security dashboards

. Manage and administer CyberArk EPM & PAM

. Administer Trend Micro email and endpoint security alerts

. Manage PKI certificate renewals and deployments

. Troubleshoot SSL and encryption issues

. Investigate medium-level security incidents

. Provide audit evidence and compliance reporting support

. Maintain updated security SOPs and documentation

. Participate in DR and security validation testing

. Escalate complex threats to L3 Security Engineer

Requirements

. Diploma/Degree in Computer Science, Information Technology, Engineering, or related disciplines.

. Proven experience in enterprise cybersecurity, with strong expertise in identity and access management (IAM), cloud security, privileged access management (PAM), and security governance.

. Hands-on experience administering and securing Active Directory, ADFS, Entra ID, Azure AD Connect, Single Sign-On (SSO), Conditional Access, Multi-Factor Authentication (MFA), and federated identity services.

. Strong knowledge of Microsoft Azure and Microsoft 365 security technologies, including Azure Firewall, ExpressRoute, Private Link, Zero Trust architectures, and cloud security best practices.

. Experience managing privileged access and endpoint security platforms, including CyberArk PAM/EPM, email security, endpoint protection, PKI, certificate lifecycle management, and encryption technologies.

. Proven ability to investigate and respond to security incidents, conduct root cause analysis, perform security posture assessments, and implement remediation strategies.

. Experience developing and enforcing security standards, hardening baselines, governance frameworks, compliance controls, and audit requirements within enterprise environments.

. Strong understanding of security frameworks, risk management, ISMS, regulatory compliance, and security architecture principles.

. Excellent stakeholder management, documentation, and communication skills, with experience providing executive-level reporting, leading security initiatives, and mentoring junior security team members.

Licence no: 12C6060