Azure Cloud Security Engineer: Identity & Endpoint

EPAM Systems

Malaysia

On-site

MYR 180,000 - 320,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

EPAM Systems in Malaysia is seeking an Azure Security Engineer to implement cloud, identity and endpoint controls in a regulated hedge fund environment. You will support Singapore and regional offices by turning security designs into production-ready configurations across Entra ID, Defender, Intune and Azure Firewall, with emphasis on hardening, testing and documentation.

Responsibilities include configuring Entra ID controls (CA, MFA, PIM), building Azure security controls, managing Intune

Qualifications

Hands-on experience implementing cloud, identity and endpoint security controls in production.
Knowledge of Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Defender for Cloud, Defender for Endpoint and Azure Firewall.
Experience configuring device and endpoint controls via Microsoft Intune.
Understanding of vulnerability management tools and remediation workflows (Nessus, Defender).
Familiarity with CIS Controls v8 or equivalent standards.
Ability to translate security designs into secure configurations and SOPs.
Strong troubleshooting, testing and documentation skills.
Clear collaboration across Security Architecture, Ops, Governance and Engineering.

Responsibilities

Configure Entra ID controls including CA, MFA and PIM workflows.
Build and improve Azure security controls: Defender for Cloud, Azure Firewall and network segmentation.
Manage endpoint security baselines in Intune and Defender for Endpoint.
Implement security designs from the Security Architect into production configurations.
Perform configuration reviews and hardening per CIS Controls v8.
Remediate findings from vulnerability scans and security assessments.
Maintain SOPs and test control effectiveness.
Collaborate with Engineering, Security Operations and Governance teams.