Security Engineer

FNRCO; Jeddah; On-site; SAR 224,000 - 338,000; Full time

Job summary

A technology solutions provider in Jeddah is looking for an experienced identity management professional with expertise in Microsoft Entra, Azure AD, and Google Cloud. The ideal candidate will have 8-12 years of experience, particularly in Identity & Access Management and certificate lifecycle management. Applicants should possess a Bachelor’s degree in IT or Engineering. This role requires strong problem-solving skills and the capability to integrate complex systems.

Qualifications

• 8 to 12 years of experience in IT or related fields.

Skills

Identity & Access Management (IAM)

Azure AD / Entra integration

Active Directory administration

PKI concepts

Google Cloud IAM

Education

Bachelor’s degree in IT, Engineering, or related field

Job description

Job Description:

Microsoft Entra (Entra ID, Permissions Management, ID Governance)

• Identity & Access Management (IAM) concepts (SSO, MFA, conditional access, RBAC).
• Entra ID administration (user/group management, app registration, service principals).
• Federation & integration (SAML, OAuth 2.0, OpenID Connect).
• Identity Governance (access reviews, entitlement management, lifecycle workflows).
• Permissions Management (cloud entitlements across Azure, GCP).
• Troubleshooting authentication & authorization issues.

Microsoft Azure

• Azure AD / Entra integration with Azure resources.
• Azure RBAC & security best practices.
• Azure Policy & compliance management.
• Azure Monitor, Log Analytics, Sentinel (security monitoring).
• Familiarity with ARM templates/Bicep for infrastructure automation.

Microsoft Active Directory (AD)

• AD domain services administration (user, group, OU, GPO).
• Domain & forest trust management.
• DNS integration with AD.
• AD replication & troubleshooting (dcdiag, repadmin).
• Security hardening (admin tiering, delegation).
• AD backup & recovery procedures.

Microsoft Active Directory Certificate Services (AD CS)

• PKI concepts (public/private keys, X.509 certificates, CRL, OCSP).
• Installing & configuring AD CS (root CA, subordinate CA).
• Certificate templates, enrollment policies, and auto-enrollment.
• Managing CRLs & OCSP responders.
• Securing CA infrastructure & key material.
• Certificate lifecycle management & renewal automation.

Certificate Lifecycle Management (CLM)

• Managing certificate inventories & expiration alerts.
• Automated issuance & renewal (SCEP, ACME protocols).
• Integrating PKI with endpoint, server, and network devices.
• Governance & compliance for certificate usage.
• Transitioning cryptographic algorithms (e.g., SHA-1 → SHA-256, RSA → ECC).

Microsoft PKI

• Deep understanding of PKI trust chains.
• Secure design of enterprise PKI.
• Policy & practice statement creation.
• Hardware Security Module (HSM) integration.
• Root & subordinate CA separation & protection.

Microsoft Network Policy Server (NPS)

• RADIUS server configuration.
• Integration with AD for authentication.
• NPS policies for wired/wireless 802.1X authentication.
• NPS & MFA integration.
• Troubleshooting RADIUS authentication issues (logs, Event Viewer).

Google Cloud Console Management

• GCP IAM (roles, service accounts, policies).
• Project, folder, and organization-level resource management.
• Integration with external identity providers (Entra ID, SAML).
• Monitoring & logging with Google Cloud Operations Suite.
• Security best practices in GCP (org policy, security command center).

Requirements:

• Bachelor’s degree in IT, Engineering, or related field.
• Experience: 8 Years - 12 Years.