Senior Security Systems Engineer (Azure)

EPAM; Singapore; On-site; SGD 180,000 - 240,000; Full time

Benefits offered by this job

Transparent career path

Individual roadmap to engineer your未来

Self-development programs with online+

Mentoring programs

Certification grants and study support

Global collaboration and knowledge分享

Job summary

EPAM is seeking a Cloud Security Engineer (Azure) to build and run security controls across Azure, Entra ID and endpoints in a lean team. This hands-on role involves hardening configurations, remediation, and validating controls from the ground up.

You will work with Defender for Cloud, Intune and XDR to implement secure baselines, manage drift, and ensure compliance while collaborating with engineering on secure infrastructure and change activities.

Qualifications

• Hands-on experience implementing security controls across Azure, identity and endpoint environments.
• Strong knowledge of Entra ID including CA, PIM and MFA.
• Experience with Defender for Cloud, Intune and endpoint protection tooling.
• Experience configuring network security controls like Azure Firewall and segmentation patterns.
• Familiarity with vulnerability management and Nessus findings triage, remediation and verification.

Responsibilities

• Configure and maintain Entra ID controls including CA, MFA and privileged access workflows.
• Implement and tune Azure security controls including Defender for Cloud, Azure Firewall and network segmentation.
• Manage endpoint security baselines using Intune and Defender XDR.
• Apply hardening standards, detect drift and drive remediation to restore compliance.
• Triage and remediate vulnerability findings from Nessus and Defender within SLAs.
• Partner with Engineering to embed security config into infrastructure builds and change activities.
• Provide escalation for control-level issues raised by Security Operations and external partners.
• Maintain documentation, SOPs and control validation evidence in Confluence.

Skills

Azure security

Microsoft Entra ID

MFA

Defender for Cloud

Intune

Defender XDR

Vulnerability triage

CIS Controls

Tools

Microsoft Defender for Cloud

Microsoft Intune

Microsoft Defender XDR

Azure Firewall

Tenable Nessus

Confluence

Job description

We are seeking a Cloud Security Engineer (Azure) to implement and run security controls across Azure, Microsoft Entra ID and endpoints. You will harden configurations, remediate vulnerabilities and validate controls in a lean team building security foundations from the ground up. This is hands‑on engineering, not a pure design role.

Responsibilities

• Configure and maintain Microsoft Entra ID controls including Conditional Access, Multi‑factor authentication (MFA) and privileged access workflows
• Implement and tune Azure security controls including Microsoft Defender for Cloud, Azure Firewall and network segmentation
• Manage endpoint security baselines using Microsoft Intune and Microsoft Defender XDR
• Apply hardening standards, detect configuration drift and drive remediation to restore compliance
• Triage and remediate vulnerability findings from Tenable Nessus, Microsoft Defender and security reviews within agreed service levels
• Partner with Engineering to embed security configuration into infrastructure builds and change activities
• Provide technical escalation for control‑level issues raised by Security Operations and external SOC or MDR partners
• Maintain clear documentation, standard operating procedures (SOPs) and control validation evidence in Confluence

Requirements

• Hands‑on experience implementing security controls across Azure, identity and endpoint environments
• Strong knowledge of Microsoft Entra ID including Conditional Access, Privileged Identity Management (PIM) and Multi‑factor authentication (MFA)
• Practical background with Microsoft Defender for Cloud, Microsoft Intune and endpoint protection tooling
• Experience configuring network security controls such as Azure Firewall and segmentation patterns
• Working knowledge of vulnerability management including Tenable Nessus findings triage, remediation and verification
• Familiarity with CIS Controls v8 or comparable hardening and baseline frameworks
• Ability to troubleshoot control failures, validate effectiveness and document outcomes clearly
• Confidence working in a small team with direct exposure to build, run, improvement and change review activities

Nice to have

• Hands‑on exposure to Microsoft Sentinel or Microsoft Defender XDR detections and response workflows
• Experience supporting audit evidence collection, regulatory mapping or governance reporting
• Microsoft certifications such as SC‑100, SC‑300 or AZ‑500

We offer

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2021 & 2022&2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters
• You will be challenged while working side‑by‑side with the best talent globally. We work with top‑notch technologies, constantly seeking new industry trends and best practices
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey
• At EPAM, you can find vast opportunities for self‑development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us

Life at EPAM

- EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

- You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In‑House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.