Senior / Security Engineer / IAM Engineer / Enterprise Tools & Observability Engineer (Ref 26505)

Responsibilities

• Design and govern enterprise identity security architecture

• Administer Active Directory and ADFS operations

• Maintain Entra ID configurations and policies

• Monitor Azure AD Connect synchronization health

• Support SSO integrations (SAML, OAuth, OIDC)

• Enforce and troubleshoot Conditional Access policies

• Manage MFA enrollment and troubleshooting

• Monitor Azure Firewall logs and alerts

• Validate ExpressRoute security posture

• Review Private Endpoint and Private Link configurations

• Monitor Microsoft 365 security dashboards

• Manage and administer CyberArk EPM & PAM

• Administer Trend Micro email and endpoint security alerts

• Manage PKI certificate renewals and deployments

• Troubleshoot SSL and encryption issues

• Investigate medium-level security incidents

• Provide audit evidence and compliance reporting support

• Maintain updated security SOPs and documentation

• Participate in DR and security validation testing

• Escalate complex threats to L3 Security Engineer

Requirements

• Diploma/Degree in Computer Science, Information Technology, Engineering, or related disciplines.

• Proven experience in enterprise cybersecurity, with strong expertise in identity and access management (IAM), cloud security, privileged access management (PAM), and security governance.

• Hands-on experience administering and securing Active Directory, ADFS, Entra ID, Azure AD Connect, Single Sign-On (SSO), Conditional Access, Multi-Factor Authentication (MFA), and federated identity services.

• Strong knowledge of Microsoft Azure and Microsoft 365 security technologies, including Azure Firewall, ExpressRoute, Private Link, Zero Trust architectures, and cloud security best practices.

• Experience managing privileged access and endpoint security platforms, including CyberArk PAM/EPM, email security, endpoint protection, PKI, certificate lifecycle management, and encryption technologies.

• Proven ability to investigate and respond to security incidents, conduct root cause analysis, perform security posture assessments, and implement remediation strategies.

• Experience developing and enforcing security standards, hardening baselines, governance frameworks, compliance controls, and audit requirements within enterprise environments.

• Strong understanding of security frameworks, risk management, ISMS, regulatory compliance, and security architecture principles.

• Excellent stakeholder management, documentation, and communication skills, with experience providing executive-level reporting, leading security initiatives, and mentoring junior security team members.

Licence no: 12C6060