Security Engineer, Modern Workplace Technology

Security Engineer, Modern Workplace Technology - Security Services (Remote)

Full time, India

Location: Pune, India

Job Summary

The Security Engineer (Identity & Access) sits within the global ICT / MWT Security Services function and provides dedicated engineering ownership for identity, access and mobile access protection controls across BCD Travel s Microsoft security ecosystem. The role designs, implements, tunes and continuously improves Conditional Access, Identity Protection, MFA, Defender for Cloud Apps, Microsoft Purview Information Protection and MDM/MAM security controls. The objective is to move identity security from distributed and reactive support to proactive, measurable and continuously governed protection of the primary enterprise attack surface.

Responsibilities

• Design, enforce, review, and optimize CA policies across user, device, application, location, risk and session contexts
• Engineer, tune, and govern policies and anomaly detections to improve signal quality, visibility and enterprise security monitoring
• Monitor and operationalize risk-based controls for scenarios such as impossible travel, high-risk users and risky sign-ins
• Own MFA strategy and enforcement, including rollout and improvement of phishing-resistant authentication methods
• Integrate identity and access controls across Entra, Defender and Purview to ensure consistent security outcomes
• Continuously assess policy coverage, exclusions, break-glass considerations, trusted network/device assumptions and session controls
• Review risky users, risky sign-ins, impossible travel and other identity risk signals to identify required tuning, remediation or escalation
• Tune Defender for Cloud Apps policies and anomaly detections to improve high-quality signals for monitoring and response
• Own operational tickets, policy changes, security reviews, and escalations related to identity, access, MFA and mobile access controls within agreed priorities
• Coordinate with MWT Security Services engineers, endpoint management, SOC/security operations, audit and compliance stakeholders

About you

• Strong hands-on experience with Microsoft Entra ID, Conditional Access, MFA and Identity Protection
• Practical experience engineering and maintaining Microsoft Defender for Cloud Apps policies and anomaly detections
• Understanding of Microsoft Purview Information Protection and data classification concepts
• Experience with Android and iOS MDM/MAM security controls, preferably with Microsoft Intune
• Ability to translate risk, audit, and compliance requirements into enforceable technical controls
• Strong documentation, communication, troubleshooting, and stakeholder-management skills
• Ability to Interpret and Follow Written IT Policies and Procedures
• Knowledge of security monitoring, incident response handoffs, and evidence collection practices
• Excellent verbal and written communication skills in English
• Ability to travel domestically and internationally as needed

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.