IT Security Engineer #IDO

Owns enterprise security engineering across identity, cloud, messaging, PKI, and Zero Trust architecture. Responsible for security design, governance enforcement, advanced incident handling, and strategic hardening initiatives.

Key Responsibilities

• Design and govern enterprise identity security architecture
• Lead Entra ID and federation security strategy
• Architect and enforce Zero Trust policies
• Secure Azure Landing Zone and hybrid connectivity
• Govern ExpressRoute and Private Link data flows
• Review and approve Conditional Access framework
• Lead PKI governance and certificate lifecycle strategy
• Define Microsoft 365 security architecture standards
• Oversee email security, encryption, and RMS controls
• Lead advanced threat investigations and root cause analysis
• Coordinate security incident response at enterprise level
• Ensure compliance with IT Security Governance Framework
• Define hardening baselines for identity and cloud systems
• Manage CyberArk EPM & PAM and custom connector
• Provide executive-level security reporting
• Drive security improvement roadmap initiatives
• Support audit reviews and compliance assessments
• Mentor L1 and L2 security team members
• Validate new workload onboarding against Zero Trust standards
• Conduct periodic security posture assessments
• Ensure alignment with ISMS and governance policies
• Any other ad-hoc duties as assigned by supervisors

Required Skills

• Active Directory (Multi-Forest), ADFS, Microsoft Entra ID, Azure AD B2C
• Microsoft Identity Manager, Azure AD Connect
• LDAP, SAML, OAuth, OIDC, WS-Fed
• Azure Landing Zone, Hub-and-Spoke Network Model
• ExpressRoute, Azure Firewall, Private Link & Private Endpoints
• Conditional Access Enforcement & Zero Trust Architecture
• Microsoft 365 Security Architecture & Exchange Online Security
• Trend Micro Email & Cloud App Security, Microsoft RMS
• CyberArk EPM & PAM
• DigiCert Managed PKI, Enterprise Certificate Lifecycle Governance
• Email Encryption & Digital Signing
• Azure Monitor, Log Analytics, Microsoft Defender
• Advanced Security Analytics
• Preferred: CISSP, AZ-500, SC-300, SC-200

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: [email protected]

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd