IT Security Engineer #IDO

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

RECRUIT EXPRESS PTE LTD in Singapore seeks a Senior Security Architect to manage day-to-day operational identity security, Microsoft 365 security, PKI lifecycle, and hybrid Zero Trust controls within a large enterprise environment.

You will design and govern enterprise identity security architecture, define Entra ID and federation security strategy, enforce Zero Trust policies, secure Azure Landing Zone, and oversee incident response and audit readiness.

Qualifications

• Experience designing and governing enterprise identity security architecture.

Responsibilities

• Design and govern enterprise identity security architecture.
• Lead Entra ID and federation security strategy.
• Architect and enforce Zero Trust policies.
• Secure Azure Landing Zone and hybrid connectivity.
• Oversee PKI lifecycle governance.
• Review and approve Conditional Access framework.
• Lead security incident investigations and root cause analysis.
• Provide executive-level security reporting.

Skills

Microsoft Active Directory

Microsoft Entra ID / Azure AD

ADFS

Public Key Infrastructure (PKI)

Zero Trust

Azure Firewall

ExpressRoute

Private Link

Rights Management Services (RMS)

CyberArk EPM & PAM

SAML / OAuth / OIDC

MFA

Security incident response

Tools

Trend Micro Security Suite

CyberArk EPM & PAM

DigiCert PKI & SSL Management

Microsoft Rights Management Services (RMS)

Job description

Responsible for day-to-day operational management of identity security, Microsoft 365 security, PKI lifecycle, firewall monitoring, and Azure cloud security controls within a hybrid Zero Trust architecture.

Key Responsibilities

• Design and govern enterprise identity security architecture
• Lead Entra ID and federation security strategy
• Architect and enforce Zero Trust policies
• Secure Azure Landing Zone and hybrid connectivity
• Govern ExpressRoute and Private Link data flows
• Review and approve Conditional Access framework
• Lead PKI governance and certificate lifecycle strategy
• Define Microsoft 365 security architecture standards
• Oversee email security, encryption, and RMS controls
• Lead advanced threat investigations and root cause analysis
• Coordinate security incident response at enterprise level
• Ensure compliance with IT Security Governance Framework
• Define hardening baselines for identity and cloud systems
• Manage CyberArk EPM & PAM and custom connector
• Provide executive-level security reporting
• Drive security improvement roadmap initiatives
• Support audit reviews and compliance assessments
• Mentor L1 and L2 security team members
• Validate new workload onboarding against Zero Trust standards
• Conduct periodic security posture assessments
• Ensure alignment with ISMS and governance policies
• Any other ad-hoc duties as assigned by supervisors

Required Skills

• Microsoft Active Directory & ADFS
• Microsoft Entra ID & Azure AD Connect
• Microsoft Identity Manager (MIM)
• SAML, OAuth, OIDC
• Microsoft MFA & Symantec VIP
• Conditional Access Policies
• Azure Firewall, ExpressRoute, Azure Private Link
• Hub-and-Spoke Architecture & Private Endpoints
• Microsoft 365 Security & Exchange Online Protection
• Trend Micro Security Suite
• CyberArk EPM & PAM
• Microsoft Rights Management Services (RMS)
• DigiCert Managed PKI & SSL Certificate Management