Senior Security Infrastructure Engineer (IT Security Lead)

Job Responsibilities

Lead the design, implementation, and governance of enterprise security infrastructure across Identity & Access Management (IAM), Microsoft Entra ID, Active Directory, PKI, Microsoft 365, and Azure Security.

Define and enforce Zero Trust architecture, Conditional Access, identity governance, and privileged access management (CyberArk PAM/EPM).

Manage Azure Landing Zone security, ExpressRoute, Azure Firewall, Private Link, and hybrid cloud security controls.

Oversee Enterprise PKI, certificate lifecycle management, email security, encryption, and Microsoft Defender security solutions.

Lead security architecture reviews, major incident investigations, vulnerability remediation, and security hardening initiatives.

Drive compliance with security governance, ISMS, and audit requirements while mentoring L1–L3 engineers and leading technical security projects.

Requirements

9–12 years of experience in IT Infrastructure Security, IAM, and Cloud Security.

Strong hands‑on experience with Microsoft Entra ID, Active Directory, ADFS, Azure AD Connect, Azure AD B2C, Microsoft Identity Manager (MIM), and CyberArk PAM/EPM.

Expertise in Azure Security, Zero Trust Architecture, Conditional Access, Microsoft 365 Security, PKI, and certificate lifecycle management.

Experience with Microsoft Defender, Azure Monitor, Log Analytics, and enterprise security governance.

Strong leadership, stakeholder management, troubleshooting, and documentation skills.

Preferred Certifications

CISSP

Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

#J-18808-Ljbffr