Senior / Security Engineer / IAM Engineer / Enterprise Tools & Observability Engineer (Ref 26505)

Responsibilities • Design and govern enterprise identity security architecture • Administer Active Directory and ADFS operations • Maintain Entra ID configurations and policies • Monitor Azure AD Connect synchronization health • Support SSO integrations (SAML, OAuth, OIDC) • Enforce and troubleshoot Conditional Access policies • Manage MFA enrollment and troubleshooting • Monitor Azure Firewall logs and alerts • Validate ExpressRoute security posture • Review Private Endpoint and Private Link configurations • Monitor Microsoft 365 security dashboards • Manage and administer CyberArk EPM & PAM • Administer Trend Micro email and endpoint security alerts • Manage PKI certificate renewals and deployments • Troubleshoot SSL and encryption issues • Investigate medium-level security incidents • Provide audit evidence and compliance reporting support • Maintain updated security SOPs and documentation • Participate in DR and security validation testing • Escalate complex threats to L3 Security Engineer Requirements • Diploma/Degree in Computer Science, Information Technology, Engineering, or related disciplines. • Proven experience in enterprise cybersecurity, with strong expertise in identity and access management (IAM), cloud security, privileged access management (PAM), and security governance. • Hands-on experience administering and securing Active Directory, ADFS, Entra ID, Azure AD Connect, Single Sign-On (SSO), Conditional Access, Multi-Factor Authentication (MFA), and federated identity services. • Strong knowledge of Microsoft Azure and Microsoft 365 security technologies, including Azure Firewall, ExpressRoute, Private Link, Zero Trust architectures, and cloud security best practices. • Experience managing privileged access and endpoint security platforms, including CyberArk PAM/EPM, email security, endpoint protection, PKI, certificate lifecycle management, and encryption technologies. • Proven ability to investigate and respond to security incidents, conduct root cause analysis, perform security posture assessments, and implement remediation strategies. • Experience developing and enforcing security standards, hardening baselines, governance frameworks, compliance controls, and audit requirements within enterprise environments. • Strong understanding of security frameworks, risk management, ISMS, regulatory compliance, and security architecture principles. • Excellent stakeholder management, documentation, and communication skills, with experience providing executive-level reporting, leading security initiatives, and mentoring junior security team members. Licence no: 12C6060