Identity & Cloud Security Engineer — Zero Trust (Azure)

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

RECRUIT EXPRESS PTE LTD in Singapore seeks a Senior Security Architect to manage day-to-day operational identity security, Microsoft 365 security, PKI lifecycle, and hybrid Zero Trust controls within a large enterprise environment.

You will design and govern enterprise identity security architecture, define Entra ID and federation security strategy, enforce Zero Trust policies, secure Azure Landing Zone, and oversee incident response and audit readiness.

Qualifications

• Experience designing and governing enterprise identity security architecture.

Responsibilities

• Design and govern enterprise identity security architecture.
• Lead Entra ID and federation security strategy.
• Architect and enforce Zero Trust policies.
• Secure Azure Landing Zone and hybrid connectivity.
• Oversee PKI lifecycle governance.
• Review and approve Conditional Access framework.
• Lead security incident investigations and root cause analysis.
• Provide executive-level security reporting.

Skills

Microsoft Active Directory

Microsoft Entra ID / Azure AD

ADFS

Public Key Infrastructure (PKI)

Zero Trust

Azure Firewall

ExpressRoute

Private Link

Rights Management Services (RMS)

CyberArk EPM & PAM

SAML / OAuth / OIDC

MFA

Security incident response

Tools

Trend Micro Security Suite

CyberArk EPM & PAM

DigiCert PKI & SSL Management

Microsoft Rights Management Services (RMS)

Job description

RECRUIT EXPRESS PTE LTD in Singapore seeks a Senior Security Architect to manage day-to-day operational identity security, Microsoft 365 security, PKI lifecycle, and hybrid Zero Trust controls within a large enterprise environment.

You will design and govern enterprise identity security architecture, define Entra ID and federation security strategy, enforce Zero Trust policies, secure Azure Landing Zone, and oversee incident response and audit readiness.