IT Security Engineer IDO

Responsible for day-to-day operational management of identity security, Microsoft 365 security, PKI lifecycle, firewall monitoring, and Azure cloud security controls within a hybrid Zero Trust architecture.

Key Responsibilities

• Design and govern enterprise identity security architecture
• Lead Entra ID and federation security strategy
• Architect and enforce Zero Trust policies
• Secure Azure Landing Zone and hybrid connectivity
• Govern ExpressRoute and Private Link data flows
• Review and approve Conditional Access framework
• Lead PKI governance and certificate lifecycle strategy
• Define Microsoft 365 security architecture standards
• Oversee email security, encryption, and RMS controls
• Lead advanced threat investigations and root cause analysis
• Coordinate security incident response at enterprise level
• Ensure compliance with IT Security Governance Framework
• Define hardening baselines for identity and cloud systems
• Manage CyberArk EPM & PAM and custom connector
• Provide executive-level security reporting
• Drive security improvement roadmap initiatives
• Support audit reviews and compliance assessments
• Mentor L1 and L2 security team members
• Validate new workload onboarding against Zero Trust standards
• Conduct periodic security posture assessments
• Ensure alignment with ISMS and governance policies
• Any other ad-hoc duties as assigned by supervisors

Required Skills

• Microsoft Active Directory & ADFS
• Microsoft Entra ID & Azure AD Connect
• Microsoft Identity Manager (MIM)
• SAML, OAuth, OIDC
• Microsoft MFA & Symantec VIP
• Conditional Access Policies
• Azure Firewall, ExpressRoute, Azure Private Link
• Hub-and-Spoke Architecture & Private Endpoints
• Microsoft 365 Security & Exchange Online Protection
• Trend Micro Security Suite
• CyberArk EPM & PAM
• Microsoft Rights Management Services (RMS)
• DigiCert Managed PKI & SSL Certificate Management

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: [Confidential Information]

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd