Cloud Security Engineer (Azure)

EPAM Systems; Malaysia; On-site; MYR 180,000 - 320,000; Full time

Job summary

EPAM Systems in Malaysia is seeking an Azure Security Engineer to implement cloud, identity and endpoint controls in a regulated hedge fund environment. You will support Singapore and regional offices by turning security designs into production-ready configurations across Entra ID, Defender, Intune and Azure Firewall, with emphasis on hardening, testing and documentation.

Responsibilities include configuring Entra ID controls (CA, MFA, PIM), building Azure security controls, managing Intune

Qualifications

• Hands-on experience implementing cloud, identity and endpoint security controls in production.
• Knowledge of Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Defender for Cloud, Defender for Endpoint and Azure Firewall.
• Experience configuring device and endpoint controls via Microsoft Intune.
• Understanding of vulnerability management tools and remediation workflows (Nessus, Defender).
• Familiarity with CIS Controls v8 or equivalent standards.
• Ability to translate security designs into secure configurations and SOPs.
• Strong troubleshooting, testing and documentation skills.
• Clear collaboration across Security Architecture, Ops, Governance and Engineering.

Responsibilities

• Configure Entra ID controls including CA, MFA and PIM workflows.
• Build and improve Azure security controls: Defender for Cloud, Azure Firewall and network segmentation.
• Manage endpoint security baselines in Intune and Defender for Endpoint.
• Implement security designs from the Security Architect into production configurations.
• Perform configuration reviews and hardening per CIS Controls v8.
• Remediate findings from vulnerability scans and security assessments.
• Maintain SOPs and test control effectiveness.
• Collaborate with Engineering, Security Operations and Governance teams.

Skills

Cloud security

Identity security

Endpoint security

Azure security

Entra ID

Conditional Access

MFA

PIM

Intune

Defender for Cloud

Defender for Endpoint

Azure Firewall

Vulnerability management

CIS Controls

Documentation

Troubleshooting

Tools

Nessus

Microsoft Defender

Intune

Azure Defender

Job description

We are seeking an Azure Security Engineer . You will implement and improve cloud, identity and endpoint controls in a regulated hedge fund environment. Based in Malaysia, you will support Singapore and regional offices by turning security designs into production-ready configurations across Entra ID, Microsoft Defender, Intune and Azure Firewall, with a focus on hardening, testing and documentation.

Responsibilities

• Configure and maintain Microsoft Entra ID controls including Conditional Access, multi-factor authentication (MFA) and Privileged Identity Management (PIM) workflows
• Build and improve Azure security controls including Microsoft Defender for Cloud, Azure Firewall and network segmentation in a hub-and-spoke design
• Manage endpoint security baselines in Microsoft Intune and Microsoft Defender for Endpoint, resolving configuration drift
• Implement security designs from the Security Architect through secure, reliable production configurations
• Perform configuration reviews and hardening aligned to CIS Controls v8 and internal standards
• Remediate findings from vulnerability scans, security assessments and technical reviews within agreed service levels
• Partner with Engineering, Security Operations and Governance teams on changes, control tuning, escalations and audit needs
• Maintain documentation and standard operating procedures (SOPs), test control effectiveness and recommend improvements

Requirements

• Hands‑on experience implementing cloud, identity and endpoint security controls in production
• Practical knowledge of Microsoft Azure security services including Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Microsoft Defender for Cloud, Microsoft Defender for Endpoint and Azure Firewall
• Experience configuring device and endpoint controls through Microsoft Intune
• Understanding of vulnerability management tools and remediation workflows such as Nessus, Microsoft Defender or equivalent
• Familiarity with hardening frameworks such as CIS Controls v8 or equivalent standards
• Ability to translate security designs into secure, maintainable configurations and operating procedures
• Strong skills in troubleshooting, testing and documentation with accurate configuration records
• Clear collaboration across Security Architecture, Security Operations, Governance and Engineering teams

Nice to have

• Experience in financial services, investment management or another regulated environment
• Exposure to Microsoft Sentinel, Microsoft Defender XDR, Microsoft Purview Data Loss Prevention (DLP), MAS Technology Risk Management (TRM) or MAS Notice 658
• Microsoft certifications such as SC‑100, SC‑300 or AZ‑500 or cloud security certifications such as CCSP or CISSP