Identity & Endpoint Security Engineer (Zero Trust)

OM Bank Limited; Johannesburg; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

Old Mutual seeks a Security Engineer (Identity, Endpoint & Data Protection) to implement and continuously improve security controls across IAM, endpoint protection, and data governance. You will configure Microsoft 365 security tooling, integrate Defender, and support incident response within a Zero Trust framework.

You will collaborate with Cyber Defence, Risk, and Cloud Engineering, driving automation and policy enforcement using Intune, PowerShell, and Graph API to strengthen the security

Qualifications

• 2–4 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations.
• Hands‑on with Microsoft Purview DLP and sensitivity labelling across cloud services.
• Familiarity with Defender Vulnerability Management and SOC workflows.
• Understanding of NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles.
• Experience with Terraform, and DevOps processes on GitHub.
• Scripting languages such as Python

Responsibilities

• Identity & Access Management: Manage and optimise Azure AD/Entra ID, CA, PIM, MFA, RBAC, and access package lifecycle governance.
• Endpoint Security & Compliance: Administer endpoint protection tooling with baselines, encryption, patching, and secure configuration of devices.
• Data Loss Prevention & Information Protection: Configure Microsoft Purview DLP, sensitivity labels, and information governance across M365.
• Vulnerability Management: Operate Defender Vulnerability Management; track, prioritise, and remediate vulnerabilities with system owners.
• Automation & Policy Deployment: Build and deploy automated policies using Intune, PowerShell, and Graph API.
• Threat Detection Enhancement: Fine-tune Defender and SIEM detections to reduce false positives and improve coverage.
• Compliance Reporting: Generate dashboards and reports for device compliance and privileged access metrics.
• Continuous Improvement: Contribute to Zero Trust adoption and automation across the security ecosystem.

Skills

IAM

Endpoint security

DLP

Vulnerability mgmt

Automation

Policy deployment

Threat detection

Compliance reporting

Zero Trust

Education

Bachelor's degree in Computer Science or Information Security

Tools

Intune

PowerShell

Graph API

Microsoft Purview

Defender for Endpoint

Sentinel

Terraform

Job description

Old Mutual seeks a Security Engineer (Identity, Endpoint & Data Protection) to implement and continuously improve security controls across IAM, endpoint protection, and data governance. You will configure Microsoft 365 security tooling, integrate Defender, and support incident response within a Zero Trust framework.

You will collaborate with Cyber Defence, Risk, and Cloud Engineering, driving automation and policy enforcement using Intune, PowerShell, and Graph API to strengthen the security