IT Security Engineer #IDO
Responsible for day-to-day operational management of identity security, Microsoft 365 security, PKI lifecycle, firewall monitoring, and Azure cloud security controls within a hybrid Zero Trust architecture.
Key Responsibilities
- Design and govern enterprise identity security architecture
- Lead Entra ID and federation security strategy
- Architect and enforce Zero Trust policies
- Secure Azure Landing Zone and hybrid connectivity
- Govern ExpressRoute and Private Link data flows
- Review and approve Conditional Access framework
- Lead PKI governance and certificate lifecycle strategy
- Define Microsoft 365 security architecture standards
- Oversee email security, encryption, and RMS controls
- Lead advanced threat investigations and root cause analysis
- Coordinate security incident response at enterprise level
- Ensure compliance with IT Security Governance Framework
- Define hardening baselines for identity and cloud systems
- Manage CyberArk EPM & PAM and custom connector
- Provide executive-level security reporting
- Drive security improvement roadmap initiatives
- Support audit reviews and compliance assessments
- Mentor L1 and L2 security team members
- Validate new workload onboarding against Zero Trust standards
- Conduct periodic security posture assessments
- Ensure alignment with ISMS and governance policies
- Any other ad-hoc duties as assigned by supervisors
Required Skills
- Microsoft Active Directory & ADFS
- Microsoft Entra ID & Azure AD Connect
- Microsoft Identity Manager (MIM)
- SAML, OAuth, OIDC
- Microsoft MFA & Symantec VIP
- Conditional Access Policies
- Azure Firewall, ExpressRoute, Azure Private Link
- Hub-and-Spoke Architecture & Private Endpoints
- Microsoft 365 Security & Exchange Online Protection
- Trend Micro Security Suite
- CyberArk EPM & PAM
- Microsoft Rights Management Services (RMS)
- DigiCert Managed PKI & SSL Certificate Management
Interested applicants, please email your resume to Douglas Tan Yu Feng
Email: [email protected]
CEI Reg No: R26160004
EA Licence No: 99C4599
Recruit Express Pte Ltd