Senior Network Security Engineer — Zero Trust & Cloud

NTT MSC Sdn Bhd; Cyberjaya; On-site; MYR 90,000 - 140,000; Full time

Job summary

NTT DATA is seeking a Network Security Engineer to own enterprise security across identity, cloud, and PKI, including Zero Trust architecture. You will design security architecture, govern enforcement, and drive advanced incident handling and hardening initiatives.

You will lead Entra ID and federation security, architect Zero Trust policies, secure Azure Landing Zone and hybrid connectivity, review CA frameworks, govern PKI, and provide executive security reporting aligned with ISMS.

Qualifications

• Experience designing identity and cloud security architecture.
• Deep knowledge of Azure AD and federation technologies.
• Proven track record in Zero Trust design and enforcement.
• Strong PKI governance and certificate lifecycle management.
• Familiarity with email security, RMS and data protection.

Responsibilities

• Design and govern enterprise identity security architecture.
• Lead Entra ID and federation security strategy.
• Architect and enforce Zero Trust policies.
• Secure Azure Landing Zone and hybrid connectivity.
• Govern ExpressRoute and Private Link data flows.
• Review and approve Conditional Access framework.
• Lead PKI governance and certificate lifecycle strategy.
• Define Microsoft 365 security architecture standards.
• Oversee email security, encryption, and RMS controls.
• Lead advanced threat investigations and root cause analysis.
• Coordinate security incident response at enterprise level.
• Ensure ISMS alignment and governance compliance.

Skills

Identity security

Azure AD Connect

Zero Trust

M365 Security

PKI governance

CyberArk EPM/PAM

Email encryption

Security analytics

Advanced incident handling

Industry frameworks

Tools

MS Identity Manager

LDAP/SAML/OIDC

DigiCert PKI

MS RMS

Job description

NTT DATA is seeking a Network Security Engineer to own enterprise security across identity, cloud, and PKI, including Zero Trust architecture. You will design security architecture, govern enforcement, and drive advanced incident handling and hardening initiatives.

You will lead Entra ID and federation security, architect Zero Trust policies, secure Azure Landing Zone and hybrid connectivity, review CA frameworks, govern PKI, and provide executive security reporting aligned with ISMS.