IT Security Engineer- KSA

Job Summary

We are looking for an experienced IT Engineer – Endpoint Management, PKI & Microsoft 365 E5 to manage and support enterprise endpoint management, Microsoft 365 E5 security capabilities, PKI/Certificate Authority infrastructure, and cryptographic services.

The ideal candidate will have strong hands-on experience with Microsoft Intune/MDM, Microsoft 365 E5, Entra ID, Microsoft AD CS, Issuing CAs, digital certificates, and cryptography.

Key Responsibilities

1- Endpoint Management – Intune & MDM

• Administer and support Microsoft Intune and MDM environments.
• Manage Windows, iOS/iPadOS, Android, and corporate endpoint devices.
• Configure device enrollment, compliance policies, configuration profiles, security policies, and application deployment.
• Support Windows Autopilot, MAM, and endpoint security policies.
• Integrate Intune with Microsoft Entra ID, Conditional Access, and Microsoft Defender.
• Troubleshoot device enrollment, compliance, policy, application, and authentication issues.
• Support certificate deployment to endpoints through Intune and enterprise PKI.

2- Microsoft 365 E5

• Administer and support Microsoft 365 E5 security and endpoint capabilities.
• Manage and support Entra ID, Microsoft Defender, Intune, Conditional Access, and Microsoft Purview.
• Configure security and access policies based on users, devices, applications, and risk.
• Support Microsoft 365 security hardening and endpoint security baselines.
• Troubleshoot identity, authentication, device compliance, and security-policy issues.
• Support Microsoft 365 security assessments, compliance requirements, and security improvement initiatives.

3- PKI / Certificate Authority

• Administer enterprise PKI and Microsoft Active Directory Certificate Services (AD CS).
• Manage Root CA and Issuing/Subordinate CA environments.
• Create and manage certificate templates, enrollment policies, and auto-enrollment.
• Issue, renew, revoke, and troubleshoot digital certificates.
• Manage certificate lifecycle for users, endpoints, servers, applications, and network devices.
• Manage CRL/OCSP and troubleshoot certificate chain, trust, enrollment, and authentication issues.
• Integrate PKI with Intune, Active Directory, VPN, Wi-Fi, applications, and infrastructure.
• Support commercial CA platforms such as DigiCert where required.

4- Cryptography

• Strong understanding of enterprise cryptography and PKI concepts.
• Practical knowledge of symmetric/asymmetric encryption, public/private keys, digital signatures, hashing, and key management.
• Knowledge of RSA, ECC, AES, TLS/SSL, and related cryptographic technologies.
• Support secure key generation, storage, rotation, renewal, and revocation.
• Troubleshoot certificate, encryption, TLS, and authentication-related issues.

Required Technical Skills

Must Have:

• Microsoft Intune / MDM
• Microsoft 365 E5
• Microsoft Entra ID
• Microsoft Defender & Conditional Access
• Microsoft AD CS / PKI
• Issuing CA / Subordinate CA
• Certificate lifecycle management
• Certificate templates & auto-enrollment
• CRL / OCSP
• Digital certificates & certificate-based authentication
• Cryptography – RSA, ECC, AES, TLS/SSL
• Active Directory & Group Policy
• PowerShell
• Windows endpoint administration

Nice to Have:

• SCEP / PKCS
• Intune Certificate Connector / NDES
• Microsoft Purview
• Azure Key Vault
• HSM
• DigiCert
• Windows Autopilot
• VPN/Wi-Fi certificate authentication
• Certificate lifecycle automation
• ServiceNow / ITSM

Experience & Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, Computer Engineering, or related field.
• 5+ years of overall IT infrastructure/security experience.
• 3+ years of hands-on PKI / Certificate Authority experience.
• 2+ years of hands-on Microsoft Intune / MDM experience.
• 2+ years of Microsoft 365 E5 experience, particularly with Intune, Entra ID, Defender, and Conditional Access.
• Strong practical knowledge of enterprise cryptography and digital certificates.
• Experience in enterprise, banking, government, or other regulated environments is preferred.

Skills

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Security / Microsoft 365 certifications
• ITIL Foundation
• CompTIA Security+
• Relevant PKI / Cybersecurity certifications

Key Competencies

• Strong technical troubleshooting and problem-solving skills
• Hands-on PKI, endpoint management, and security expertise
• Strong understanding of cryptography and certificate management
• Ability to troubleshoot complex authentication and security issues
• Good documentation and communication skills
• Ability to work independently and within a managed-services environment