Intermediate Identity and Endpoint Security Engineer

Responsibilities and Qualifications

• IAM expertise: RBAC, access reviews, identity lifecycle, SSO, MFA, conditional access, PAM, Zero Trust
• Endpoint security: EDR/XDR, MDM/UEM, hardening, patching, compliance, and incident response
• Data protection: DLP, data classification, sensitivity labelling, retention policies, regulatory compliance
• Email & collaboration security: phishing/BEC detection, malware analysis, URL protection, SharePoint/OneDrive security
• Automation: user/device provisioning & deprovisioning, security workflows, basic scripting (PowerShell/Python)
• Incident response: ransomware, phishing, malware, identity threats, and data loss events
• Governance & risk: security metrics, reporting, audits, risk assessments, and policy enforcement
• Strong analytical skills, problem-solving, cross-team collaboration, and continuous security improvement