OM Bank - Junior Security Engineer – Identity, Endpoint & Data Protection

OM Bank Limited; Johannesburg; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

Old Mutual seeks a Security Engineer (Identity, Endpoint & Data Protection) to implement and continuously improve security controls across IAM, endpoint protection, and data governance. You will configure Microsoft 365 security tooling, integrate Defender, and support incident response within a Zero Trust framework.

You will collaborate with Cyber Defence, Risk, and Cloud Engineering, driving automation and policy enforcement using Intune, PowerShell, and Graph API to strengthen the security

Qualifications

• 2–4 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations.
• Hands‑on with Microsoft Purview DLP and sensitivity labelling across cloud services.
• Familiarity with Defender Vulnerability Management and SOC workflows.
• Understanding of NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles.
• Experience with Terraform, and DevOps processes on GitHub.
• Scripting languages such as Python

Responsibilities

• Identity & Access Management: Manage and optimise Azure AD/Entra ID, CA, PIM, MFA, RBAC, and access package lifecycle governance.
• Endpoint Security & Compliance: Administer endpoint protection tooling with baselines, encryption, patching, and secure configuration of devices.
• Data Loss Prevention & Information Protection: Configure Microsoft Purview DLP, sensitivity labels, and information governance across M365.
• Vulnerability Management: Operate Defender Vulnerability Management; track, prioritise, and remediate vulnerabilities with system owners.
• Automation & Policy Deployment: Build and deploy automated policies using Intune, PowerShell, and Graph API.
• Threat Detection Enhancement: Fine-tune Defender and SIEM detections to reduce false positives and improve coverage.
• Compliance Reporting: Generate dashboards and reports for device compliance and privileged access metrics.
• Continuous Improvement: Contribute to Zero Trust adoption and automation across the security ecosystem.

Skills

IAM

Endpoint security

DLP

Vulnerability mgmt

Automation

Policy deployment

Threat detection

Compliance reporting

Zero Trust

Education

Bachelor's degree in Computer Science or Information Security

Tools

Intune

PowerShell

Graph API

Microsoft Purview

Defender for Endpoint

Sentinel

Terraform

Job description

Job Description

The Security Engineer (Identity, Endpoint & Data Protection) is responsible for implementing, maintaining, and continuously improving security controls across the Endpoint and User Ecosystem - including Identity and Access Management (IAM), Endpoint Protection, Data Loss Prevention (DLP), and Vulnerability Management. Reporting to the Cloud Security Operations Lead, this role safeguards the organisation’s users, data, and endpoints through advanced configuration of Microsoft the Microsoft stack, and supports incident response, cyber defence, and risk remediation activities. The role ensures the secure operation of Microsoft-based assets through proactive identity governance, endpoint compliance, and data protection. The engineer collaborates closely with Cyber Defence, Risk Management, and DevSecOps teams, providing technical expertise to implement risk‑driven controls, automate policy enforcement, and improve visibility through Sentinel integration. This position requires hands‑on proficiency with Microsoft E5 security tooling, strong analytical capability, and a passion for modern Zero Trust security operations.

KEY RESULT AREAS

• Identity & Access Management: Manage and optimise areas such as Azure AD / Entra ID, Conditional Access, PIM, MFA, RBAC, and access package lifecycle governance.
• Endpoint Security & Compliance: Administer endpoint protection tooling with compliance baselines, ensure encryption, patching, and secure configuration of all managed devices.
• Data Loss Prevention & Information Protection: Configure and maintain Microsoft Purview DLP, sensitivity labels, and information governance policies across M365 (Exchange, SharePoint, Teams, OneDrive).
• Vulnerability Management: Operate Microsoft Defender Vulnerability Management (DVM); track, prioritise, and remediate vulnerabilities in coordination with system owners.
• Automation & Policy Deployment: Build and deploy automated policies using Intune, PowerShell, and Graph API to enforce consistent security posture.
• Threat Detection Enhancement Fine-tune Defender and SIEM detections to reduce false positives and improve coverage of endpoint, identity, and DLP telemetry.
• Compliance Reporting Generate dashboards and reports for device compliance, privileged access, DLP violations, and vulnerability metrics.
• Continuous Improvement: Contribute to the ongoing maturity of the Endpoint and User security ecosystem and adoption of Zero Trust, “Security as Code,” and automation.

ROLE REQUIREMENTS

• Education: Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
• Certifications (Preferred): Microsoft Certified: Security Operations Analyst Associate Microsoft Certified: Identity & Access Administrator Associate Microsoft Certified: Information Protection Administrator Associate Microsoft 365 Certified: Enterprise Administrator Expert CompTIA Security+ / CySA+ / AZ/MS-500, HashiCorp Certified: Terraform Associate
• Experience: 2–4 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations. Proven experience managing Intune, Defender for Endpoint, and Entra ID conditional access policies. Hands‑on with Microsoft Purview DLP and sensitivity labelling across cloud services. Familiarity with Defender Vulnerability Management and integration into SOC workflows. Understanding of NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles. Experience with Terraform, and DevOps processes on GitHub. Scripting languages such as Python
• Nice to have - Experience with Terraform, and DevOps processes on GitHub.
• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.

Why Join Us

Join a modern, digital‑first bank where you’ll engineer and protect the identity, data, and devices that power our business. As part of the Cloud Security Operations team, you’ll shape and secure our endpoint and User environments in a fast‑paced, cloud‑native environment. You’ll collaborate across Cyber Defence, Risk, and Cloud Engineering functions, developing automation and intelligence that drive resilience, regulatory compliance, and customer trust.Here, you’ll be empowered to secure identity, protect data, and enable innovation at the forefront of South African digital banking.

Skills

• Action Planning
• Adaptive Thinking
• Computer Literacy
• Data Classification
• Data Compilation
• Data Controls
• Data Modeling
• Data Recovery
• Digital Literacy
• Information Technology (IT) Support
• Legal Practices
• Numerical Aptitude
• Report Review
• Test Case Management

Competencies

• Collaborates
• Communicates Effectively
• Cultivates Innovation
• Decision Quality
• Ensures Accountability
• Manages Complexity
• Nimble Learning
• Optimizes Work Processes

Education Closing Date 24 September 2026 , 23:59 The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

The Old Mutual Story!

Old Mutual is a premium African financial services organisation that offers a broad spectrum of financial solutions to retail and corporate customers across key market segments in 14 countries. The lines of business include Life and Savings, Property and Casualty, Asset Management and Banking and Lending. We are rooted in our purpose of Championing Mutually Positive Futures Every Day and believe that a great customer experience is anchored in a great employee experience.