IT Security and Infrastructure Engineer

NRI Indonesia; Jakarta Pusat; On-site; IDR 360,000,000 - 540,000,000; Full time

Job summary

NRI Indonesia is seeking an IT Security and Infrastructure Engineer to own cloud security posture, identity management, and compliance within the Microsoft 365 environment. You will manage Microsoft Entra ID, Intune, and Windows Autopilot at scale, design robust automation, and support day-to-day IT operations across Azure and AWS.

The role emphasizes Zero Trust, least privilege, and proactive governance using Defender, Purview, Conditional Access, and automated provisioning.

Qualifications

• Minimum 3 years in systems engineering, IT operations, or security-focused infra roles with exposure to Microsoft 365 security.
• Strong hands-on and architectural knowledge of Microsoft Entra ID, Intune, and Windows Autopilot.
• Experience with Defender and Purview solutions and Zero Trust/Least Privilege security models.
• Solid understanding of networking fundamentals and basic cloud administration.

Responsibilities

• Act as Global Administrator for MS Entra ID and MS365 ecosystem.
• Architect and maintain onboarding/offboarding workflows via Intune (auto provisioning).
• Design and enforce policies to securely separate admin privileges.
• Maintain MDM/MAM with Autopilot for automated provisioning.
• Deploy and tune Defender for Endpoint and Defender for Cloud Apps.
• Implement governance with Conditional Access, access reviews, and JIT privileges.
• Manage DLP and data lifecycle via Purview.
• Conduct vulnerability testing and ASR rule implementation.
• Provide escalation support for complex IT issues.
• Maintain Azure and AWS cloud servers and basic network infra.
• Develop and maintain IT automation using Power Automate, Power Apps, UiPath.
• Design and manage intranet portals and websites with SharePoint Online and WordPress.

Skills

Microsoft Entra ID

Microsoft Intune

Windows Autopilot

Microsoft Defender

Microsoft Purview

Zero Trust

Least Privilege

IT operations

Networking fundamentals

Automation tooling

Tools

SharePoint Online

WordPress

Git

Power Automate

Power Apps

UiPath

Phyton

Job description

We are seeking a highly skilled IT Security and Infrastructure Engineer to take primary ownership of our cloud security posture, identity management, and compliance frameworks, particularly within our Microsoft 365 environment. You will ensure that our Microsoft Entra ID and Intune environments operate securely, efficiently, and at scale. In addition, you will leverage your infrastructure expertise to maintain core network and cloud environments while providing advanced support for day-to-day IT operations and escalations.

The Mindset

• Security by Design: You understand that effective security is built on robust and automated system configurations, guided by principles such as Zero Trust and Least Privilege, rather than relying solely on security products.

Key Responsibilities

1. Identity Architecture & MS365 Administration

• Act as the Global Administrator, managing and scaling Microsoft Entra ID (Azure AD) and the broader MS365 ecosystem.
• Architect and maintain seamless onboarding and offboarding workflows (e.g., auto provisioning M365, Slack, AWS/Azure access) through Intune.
• Design and enforce policies to separate administrative privileges securely.
• Design, implement, and maintain our MDM/MAM environment (Microsoft Intune) to ensure 100% automated provisioning via Windows Autopilot.

2. Security Engineering, Compliance & Threat Defense

• Deploy, monitor, and continuously tune Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Cloud Apps (MDCA) to reduce false positives.
• Implement advanced security governance, including complex Conditional Access policies, automated access reviews, and Just-In-Time (JIT) privilege escalation.
• Manage Data Loss Prevention (DLP) and Data Lifecycle Management via Microsoft Purview.
• Conduct regular vulnerability testing and implement Attack Surface Reduction (ASR) rules.

3. IT Infrastructure & Operation Support

• Serve as the escalation point for complex day-to-day IT support and troubleshooting.
• Maintain basic cloud server infrastructure across Azure and AWS.
• Maintain fundamental network infrastructure (routing, switching, and firewall basics).

4. Process Automation & Web Platform Management

• Develop and maintain IT automation solutions using platforms such as Microsoft Power Automate, Power Apps, UiPath, Phyton, etc.
• Design, deploy, and maintain internal collaboration platforms, intranet portals, and websites using SharePoint Online, WordPress, and related technologies.
• Maintain clean, documented, and version-controlled repositories (Git) for all IT scripts, configurations, and automation workflows.

Must-Have Qualifications

• Experience: Minimum of 3 years of experience in Systems Engineering, IT Operations, Infrastructure Engineering, or a security-focused infrastructure role, with significant exposure to Microsoft 365 security technologies.
• Identity & Endpoint Management Expertise: Strong hands-on and architectural knowledge of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot.
• Security Expertise: Practical experience with Microsoft Defender and Microsoft Purview solutions, with a proven ability to implement Zero Trust and Least Privilege security models.
• Infrastructure Knowledge: Solid understanding of networking fundamentals and basic cloud infrastructure administration.

Preferred Certifications (Nice to Have)

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)