IT Security and Infrastructure Engineer

About the Role

We are seeking a highly skilled IT Security and Infrastructure Engineer to take primary ownership of our cloud security posture, identity management, and compliance frameworks, particularly within our Microsoft 365 environment. You will ensure that our Microsoft Entra ID and Intune environments operate securely, efficiently, and at scale. In addition, you will leverage your infrastructure expertise to maintain core network and cloud environments while providing advanced support for day-to-day IT operations and escalations.

The Mindset

• Security by Design: You understand that effective security is built on robust and automated system configurations, guided by principles such as Zero Trust and Least Privilege, rather than relying solely on security products.

Key Responsibilities

1. Identity Architecture & MS365 Administration

• Act as the Global Administrator, managing and scaling Microsoft Entra ID (Azure AD) and the broader MS365 ecosystem.
• Architect and maintain seamless onboarding and offboarding workflows (e.g., auto provisioning M365, Slack, AWS/Azure access) through Intune.
• Design and enforce policies to separate administrative privileges securely.
• Design, implement, and maintain our MDM/MAM environment (Microsoft Intune) to ensure 100% automated provisioning via Windows Autopilot.

2. Security Engineering, Compliance & Threat Defense

• Deploy, monitor, and continuously tune Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Cloud Apps (MDCA) to reduce false positives.
• Implement advanced security governance, including complex Conditional Access policies, automated access reviews, and Just-In-Time (JIT) privilege escalation.
• Manage Data Loss Prevention (DLP) and Data Lifecycle Management via Microsoft Purview.
• Conduct regular vulnerability testing and implement Attack Surface Reduction (ASR) rules.

3. IT Infrastructure & Operation Support

• Serve as the escalation point for complex day-to-day IT support and troubleshooting.
• Maintain basic cloud server infrastructure across Azure and AWS.
• Maintain fundamental network infrastructure (routing, switching, and firewall basics).

4. Process Automation & Web Platform Management

• Develop and maintain IT automation solutions using platforms such as Microsoft Power Automate, Power Apps, UiPath, Phyton, etc.
• Design, deploy, and maintain internal collaboration platforms, intranet portals, and websites using SharePoint Online, WordPress, and related technologies.
• Maintain clean, documented, and version-controlled repositories (Git) for all IT scripts, configurations, and automation workflows.

Must-Have Qualifications

• Experience: Minimum of 3 years of experience in Systems Engineering, IT Operations, Infrastructure Engineering, or a security-focused infrastructure role, with significant exposure to Microsoft 365 security technologies.
• Identity & Endpoint Management Expertise: Strong hands-on and architectural knowledge of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot.
• Security Expertise: Practical experience with Microsoft Defender and Microsoft Purview solutions, with a proven ability to implement Zero Trust and Least Privilege security models.
• Infrastructure Knowledge: Solid understanding of networking fundamentals and basic cloud infrastructure administration.

Preferred Certifications (Nice to Have)

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Cisco Certified Network Associate (CCNA)