Security Engineer / Architect

• Design and improve identity controls across Active Directory, including authentication, single sign-on, federation, MFA, Conditional Access, privileged access, and user access lifecycles.
• Develop security designs, standards, and implementation guidance for Microsoft 365, including Purview (DLP, sensitivity labels).
• Review new applications, cloud services, infrastructure changes, and vendor solutions. Identify risks early and recommend controls that teams can implement and operate.
• Advance Zero Trust practices across identity, endpoints, networks, and data, including secure access and network segmentation.
• Work with security operations to improve logging, detection, and response coverage. Use incident findings to strengthen designs and controls.
• Produce clear architecture documents, diagrams, standards, and design decisions. Explain options and trade-offs to engineers, business partners, and leadership.
• Assess the security implications of AI-enabled tools and help establish appropriate access, data protection, and monitoring controls.
• Stay involved through implementation, testing, and operational handoff so that designs work in practice.

• A completed post-secondary degree or diploma in computer science, information technology, cybersecurity, engineering, or a related technical discipline.
• At least six years of hands-on experience in security engineering or security-focused infrastructure or cloud engineering. A current Security Architect title is not required.
• Direct experience configuring and managing identity services, particularly Active Directory and ADFS. Experience with Conditional Access, MFA, SAML, OIDC, OAuth integrations, privileged access, and access governance is especially valuable.
• Experience securing Microsoft 365 and working with endpoint, email, web, or network security controls.
• The ability to assess a technical problem, develop a sound security design, and work with others to implement it.
• Clear communication and documentation skills, including the ability to explain technical risks and decisions to different audiences.

• Data protection, DSPM or data lifecycle governance capabilities.
• Secure access or network security platforms such as Cisco Umbrella or Cisco Secure Access; email security such as Proofpoint; or endpoint security such as CrowdStrike.
• Security frameworks such as NIST CSF or CIS Controls, and certifications such as CISSP, CISM, CCSP, or relevant Microsoft credentials.
• Experience assessing AI-enabled applications or agentic systems.
  
  

• Hybrid working arrangements with a minimum of 2 days in the office per week
• Occasional need to work outside of office hours

#INDCOR