Hybrid IT Security Engineer: On-Prem & Azure Cloud

SHAW SERVICES (PTE) LIMITED.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

SHAW SERVICES (PTE) LIMITED. in Singapore seeks a versatile Security Engineer to safeguard a hybrid IT landscape, bridging on-premise infrastructure and cloud security.

You will lead the technical efforts to ensure resilience and PCI-DSS compliance across environments. Responsibilities include firewall design and policy management, IAM governance with Cisco ISE, vulnerability management, and real-time security monitoring using Wazuh/Graylog.

Qualifications

• 3–5 years of hands-on IT security experience across hardware and cloud environments.
• Deep expertise in at least two firewalls (SonicWall, Palo Alto, Cisco ASA).
• Proven knowledge of Cisco ISE, Wazuh, or Graylog.
• Strong Microsoft Azure security knowledge (Identity, Networking, and Security tools).
• Experience with PCI-DSS compliance and security audits.

Responsibilities

• Design, deploy, and maintain firewall policies across multiple vendors.
• Manage IAM via SonicWall NMS/GMS and Cisco ISE.
• Perform vulnerability scans with OpenVAS and remediate risks.
• Lead security monitoring using Wazuh and Graylog for real-time incident response.
• Govern Azure security including Defender for Cloud, Azure Firewalls, NSGs, and Key Vaults.
• Implement IaC security within Azure DevOps pipeline.
• Oversee biometric (Biostar) and CCTV systems, and access controls.
• Drive PCI-DSS compliance and support security audits.

Skills

Firewall expertise

Azure security

DevSecOps

PCI-DSS compliance

CCTV security

Biometric integration

Wazuh

Graylog

Cisco ISE

Education

AZ-500

PCNSE

CISSP/CISM

Tools

Cisco ISE

Wazuh

Graylog

Job description

SHAW SERVICES (PTE) LIMITED. in Singapore seeks a versatile Security Engineer to safeguard a hybrid IT landscape, bridging on-premise infrastructure and cloud security.

You will lead the technical efforts to ensure resilience and PCI-DSS compliance across environments. Responsibilities include firewall design and policy management, IAM governance with Cisco ISE, vulnerability management, and real-time security monitoring using Wazuh/Graylog.