Senior Security Systems Engineer (Azure)

EPAM SYSTEMS PTE LTD; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

EPAM SYSTEMS PTE LTD in Singapore is seeking a security-focused engineer to implement and maintain Azure and identity security controls. You will work with Defender for Cloud, Intune and Defender XDR while ensuring network segmentation and hardened baselines are in place.

Collaboration with engineering and SOC partners is essential to drive remediation and evidence in Confluence. You will triage vulnerabilities, document outcomes, and maintain SOPs.

Qualifications

• Hands-on experience implementing security controls across Azure, identity and endpoint environments.
• Strong knowledge of Microsoft Entra ID including Conditional Access, Privileged Identity Management (PIM) and MFA.
• Practical background with Defender for Cloud, Intune and endpoint protection tooling.
• Experience configuring network security controls such as Azure Firewall and segmentation patterns.
• Familiarity with vulnerability management including Nessus findings triage, remediation and verification.
• Familiarity with CIS Controls v8 or comparable hardening and baseline frameworks.
• Ability to troubleshoot control failures, validate effectiveness and document outcomes clearly.

Responsibilities

• Configure and maintain Microsoft Entra ID controls including Conditional Access, MFA and privileged access workflows
• Implement and tune Azure security controls including Defender for Cloud, Azure Firewall and network segmentation
• Manage endpoint security baselines using Microsoft Intune and Defender XDR
• Apply hardening standards, detect configuration drift and drive remediation to restore compliance
• Triage and remediate vulnerability findings from Nessus, Defender and security reviews within agreed service levels
• Partner with Engineering to embed security configuration into infrastructure builds and change activities
• Provide technical escalation for control-level issues raised by Security Operations and external SOC or MDR partners
• Maintain clear documentation, SOPs and control validation evidence in Confluence

Skills

Azure security

Identity security

Vulnerability triage

Documentation

Team collaboration

Tools

Entra ID

Defender for Cloud

Intune

Nessus

Confluence

Defender XDR

Azure Firewall

Job description

About EPAM

EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job atone of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Configure and maintain Microsoft Entra ID controls including Conditional Access, Multi-factor authentication (MFA) and privileged access workflows
• Implement and tune Azure security controls including Microsoft Defender for Cloud, AzureFirewalland network segmentation
• Manage endpoint security baselines using Microsoft Intune and Microsoft Defender XDR
• Apply hardening standards, detect configurationdriftand drive remediation to restore compliance
• Triage and remediate vulnerability findings from Tenable Nessus, MicrosoftDefenderand security reviews within agreed service levels
• Partner with Engineering to embed security configuration into infrastructure builds and change activities
• Provide technical escalation for control-level issues raised by Security Operations and external SOC or MDR partners
• Maintain clear documentation, standard operating procedures (SOPs)and control validation evidence in Confluence

What Will Make You Shine

• Hands-on experience implementing security controls across Azure, identity and endpoint environments
• Strong knowledge of Microsoft Entra ID including Conditional Access, Privileged Identity Management (PIM)and Multi-factor authentication (MFA)
• Practical background with Microsoft Defender for Cloud, MicrosoftIntuneand endpoint protection tooling
• Experience configuring network security controls such as Azure Firewall and segmentation patterns
• Working knowledge of vulnerability management including Tenable Nessus findings triage,remediationand verification
• Familiarity with CIS Controls v8 or comparable hardening and baseline frameworks
• Ability to troubleshoot control failures,validateeffectiveness and document outcomes clearly
• Confidence working in a small team with direct exposure to build, run,improvementand change review activities.

Nice to Have

• Hands-on exposure to Microsoft Sentinel or Microsoft Defender XDR detections and response workflows
• Experience supporting audit evidence collection, regulatorymappingor governance reporting
• Microsoft certifications such as SC-100, SC-300or AZ-500

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Go through some standard interviews:

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

Not sure if you meet all the requirements? No problem. Let’s talk anyway and find out more.