Senior Security Infrastructure Engineer (IT Security Lead)

sagl consulting pte. ltd.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

sagl consulting pte. ltd.

is seeking an experienced Senior Security Architect to lead the design, implementation and governance of enterprise security across IAM, Entra ID, AD, PKI, Microsoft 365, and Azure. You will define Zero Trust architecture, enforce Conditional Access, identity governance, and privileged access management, while mentoring L1–L3 engineers and driving security projects and audits in a complex hybrid cloud environment.

Qualifications

• 9–12 years in IT Infrastructure Security, IAM and Cloud Security.
• Hands-on expertise with Microsoft Entra ID, Active Directory, and CyberArk PAM/EPM.

Responsibilities

• Lead design, implementation, and governance of enterprise security infrastructure across IAM and Azure.
• Define and enforce Zero Trust, Conditional Access, identity governance, and PAM.
• Manage Azure Landing Zone security and hybrid cloud controls.
• Oversee PKI, certificate lifecycle, email security, encryption, and Defender solutions.
• Lead security architecture reviews, incident investigations, remediation, and hardening initiatives.
• Drive governance with ISMS and audits while mentoring engineers.

Skills

IAM & cloud security

Leadership & mentoring

Governance & ISMS

Incident response & security

Documentation & stakeholder mgmt

Tools

Microsoft Entra ID

Active Directory

ADFS

Azure AD Connect

Azure AD B2C

MIM

CyberArk PAM/EPM

Microsoft Defender

Azure Monitor

Log Analytics

PKI management

Job description

Job Responsibilities

• Lead the design, implementation, and governance of enterprise security infrastructure across Identity & Access Management (IAM), Microsoft Entra ID, Active Directory, PKI, Microsoft 365, and Azure Security.
• Define and enforce Zero Trust architecture, Conditional Access, identity governance, and privileged access management (CyberArk PAM/EPM).
• Manage Azure Landing Zone security, ExpressRoute, Azure Firewall, Private Link, and hybrid cloud security controls.
• Oversee Enterprise PKI, certificate lifecycle management, email security, encryption, and Microsoft Defender security solutions.
• Lead security architecture reviews, major incident investigations, vulnerability remediation, and security hardening initiatives.
• Drive compliance with security governance, ISMS, and audit requirements while mentoring L1–L3 engineers and leading technical security projects.

Requirements

• 9–12 years of experience in IT Infrastructure Security, IAM, and Cloud Security.
• Strong hands‑on experience with Microsoft Entra ID, Active Directory, ADFS, Azure AD Connect, Azure AD B2C, Microsoft Identity Manager (MIM), and CyberArk PAM/EPM.
• Expertise in Azure Security, Zero Trust Architecture, Conditional Access, Microsoft 365 Security, PKI, and certificate lifecycle management.
• Experience with Microsoft Defender, Azure Monitor, Log Analytics, and enterprise security governance.
• Strong leadership, stakeholder management, troubleshooting, and documentation skills.

Preferred Certifications

• CISSP
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)