Security Engineer L3 (1-year renewable contract) #IAC

Job Responsibilities

• Design and govern enterprise identity security architecture

• Lead Entra ID and federation security strategy

• Architect and enforce Zero Trust policies

• Secure Azure Landing Zone and hybrid connectivity

• Govern ExpressRoute and Private Link data flows

• Review and approve Conditional Access framework

• Lead PKI governance and certificate lifecycle strategy

• Define Microsoft 365 security architecture standards

• Oversee email security, encryption, and RMS controls

• Lead advanced threat investigations and root cause analysis

• Coordinate security incident response at enterprise level

• Ensure compliance with IT Security Governance Framework

• Define hardening baselines for identity and cloud systems

• Manage CyberArk EPM & PAM and custom connector

• Provide executive-level security reporting

• Drive security improvement roadmap initiatives

• Support audit reviews and compliance assessments

• Mentor L1 and L2 security team members

• Validate new workload onboarding against Zero Trust standards

• Conduct periodic security posture assessments

• Ensure alignment with ISMS and governance policies

• Any other ad-hoc duties as assigned by supervisor

Requirements

• Degree in IT or related discipline

• Active Directory (Multi-Forest), ADFS, Microsoft Entra ID, Azure AD B2C

• Microsoft Identity Manager, Azure AD Connect

• LDAP, SAML, OAuth, OIDC, WS-Fed

• Azure Landing Zone, Hub-and-Spoke Network Model

• ExpressRoute, Azure Firewall, Private Link & Private Endpoints

• Conditional Access Enforcement & Zero Trust Architecture

• Microsoft 365 Security Architecture & Exchange Online Security

• Trend Micro Email & Cloud App Security, Microsoft RMS

• CyberArk EPM & PAM

• DigiCert Managed PKI, Enterprise Certificate Lifecycle Governance

• Email Encryption & Digital Signing

• Azure Monitor, Log Analytics, Microsoft Defender

• Advanced Security Analytics

• Preferred: CISSP, AZ-500, SC-300, SC-200

Interested applicants, please email your resume to Andre Chua Jing Ming Email: [email protected] CEI Reg No: R1989053 EA Licence No: 99C4599 Recruit Express Pte Ltd