Security Engineer L2 (1-year renewable contract) #IAC
Summary
L2 Security Engineer on a 1-year contract administering Microsoft identity infrastructure (AD, Entra ID, ADFS), managing CyberArk PAM/EPM, Trend Micro, Azure networking security, PKI, and supporting SSO integrations and incident investigation.
Job Responsibilities
- Administer Active Directory and ADFS operations
- Maintain Entra ID configurations and policies
- Monitor Azure AD Connect synchronization health
- Support SSO integrations (SAML, OAuth, OIDC)
- Enforce and troubleshoot Conditional Access policies
- Manage MFA enrollment and troubleshooting
- Monitor Azure Firewall logs and alerts
- Validate ExpressRoute security posture
- Review Private Endpoint and Private Link configurations
- Monitor Microsoft 365 security dashboards
- Manage and administer CyberArk EPM & PAM
- Administer Trend Micro email and endpoint security alerts
- Manage PKI certificate renewals and deployments
- Troubleshoot SSL and encryption issues
- Investigate medium-level security incidents
- Provide audit evidence and compliance reporting support
- Maintain updated security SOPs and documentation
- Participate in DR and security validation testing
- Escalate complex threats to L3 Security Engineer
- Any other ad-hoc duties as assigned by supervisor
Requirements
- Degree in IT or related discipline
- Microsoft Active Directory & ADFS
- Microsoft Entra ID & Azure AD Connect
- Microsoft Identity Manager (MIM)
- SAML, OAuth, OIDC
- Microsoft MFA & Symantec VIP
- Conditional Access Policies
- Azure Firewall, ExpressRoute, Azure Private Link
- Hub-and-Spoke Architecture & Private Endpoints
- Microsoft 365 Security & Exchange Online Protection
- Trend Micro Security Suite
- CyberArk EPM & PAM
- Microsoft Rights Management Services (RMS)
- DigiCert Managed PKI & SSL Certificate Management
Interested applicants, please email your resume to Andre Chua Jing Ming
Email: andrechua@recruitexpress.com.sg
CEI Reg No: R1989053
EA Licence No: 99C4599
Recruit Express Pte Ltd