Identity & Endpoint Security Engineer: Zero Trust & DLP

Old Mutual South Africa; Cape Town; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Old Mutual South Africa is seeking a Security Engineer (Identity, Endpoint & Data Protection) to build and operate security controls across the endpoint and user ecosystem. You will work with IAM, DLP, and vulnerability management to strengthen Zero Trust and automated policy enforcement.

The role partners with Cyber Defence, Risk Management, and DevSecOps to mature security operations, with a focus on Microsoft E5 tooling, Sentinel integration, and secure governance across cloud assets.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
• 2–4 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations.
• Hands-on with Microsoft Purview DLP and sensitivity labelling across cloud services.

Responsibilities

• Identity & Access Management: Manage Azure AD / Entra ID, Conditional Access, PIM, MFA, RBAC, and access package lifecycle governance.
• Endpoint Security & Compliance: Administer endpoint protection tooling with baseline encryption, patching, and secure config of devices.
• Data Loss Prevention & Information Protection: Configure and maintain Microsoft Purview DLP, sensitivity labels, and information governance policies across M365.
• Vulnerability Management: Operate Defender Vulnerability Management, track and remediate vulnerabilities with owners.
• Automation & Policy Deployment: Build and deploy automated policies using Intune, PowerShell, and Graph API.
• Threat Detection Enhancement: Fine-tune Defender and SIEM detections to reduce false positives and improve coverage.
• Compliance Reporting: Generate dashboards and reports for device compliance, privileged access, DLP violations, and vulnerabilities.
• Continuous Improvement: Contribute to Zero Trust adoption, Security as Code, and automation within Endpoint/User security.

Skills

Identity & Access Management

Endpoint Security

DLP & Information Protection

Vulnerability Management

Automation & Scripting

Policy Deployment

Threat Detection

Compliance Reporting

Zero Trust

Security as Code

NIST CSF

Education

Bachelor's degree in Computer Science or Information Security

Tools

Microsoft 365 Defender

Azure AD / Entra ID

Microsoft Purview DLP

Defender for Endpoint

Sentinel

Intune

Graph API

PowerShell

Terraform

Job description

Old Mutual South Africa is seeking a Security Engineer (Identity, Endpoint & Data Protection) to build and operate security controls across the endpoint and user ecosystem. You will work with IAM, DLP, and vulnerability management to strengthen Zero Trust and automated policy enforcement.

The role partners with Cyber Defence, Risk Management, and DevSecOps to mature security operations, with a focus on Microsoft E5 tooling, Sentinel integration, and secure governance across cloud assets.