Entra ID Identity Security Engineer - Cloud Zero Trust

GIC; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid work options

Global exposure

Job summary

GIC in Singapore is seeking an Entra ID & Identity Security Engineer to lead security, hardening, and automation of our cloud‑first identity platform (Entra ID/Azure AD) with on‑premises AD in a secure hybrid estate.

Design and enforce Conditional Access, Identity Protection, PIM, and workload identities; develop AI/LLM‑driven automation; partner with DevOps for CI/CD and governance; and strengthen detection, governance, and incident response.

Qualifications

• Deep Entra ID expertise: CA, Identity Protection, PIM, app/workload identities.
• Experience applying AI/LLMs to engineering work.
• Strong scripting and automation skills in PowerShell or Python.
• Knowledge of hybrid identity and Active Directory.

Responsibilities

• Design, secure, and operate the Entra ID tenant as the core of the enterprise identity platform.
• Engineer and harden Conditional Access policies and Identity Protection.
• Implement Privileged Identity Management and least-privilege delegation.
• Secure app registrations, enterprise applications, service principals, and workload identities.

Skills

Entra ID expertise

Agentic AI / LLMs

DevOps & GitHub

API design

PowerShell / Python

Microsoft Graph

Hybrid identity security

Zero Trust

PIM & PAM

SIEM integration

Tools

GitHub Actions

Microsoft Graph API

PowerShell

Python

Job description

GIC in Singapore is seeking an Entra ID & Identity Security Engineer to lead security, hardening, and automation of our cloud‑first identity platform (Entra ID/Azure AD) with on‑premises AD in a secure hybrid estate.

Design and enforce Conditional Access, Identity Protection, PIM, and workload identities; develop AI/LLM‑driven automation; partner with DevOps for CI/CD and governance; and strengthen detection, governance, and incident response.