Responsibilities

Responsible for day-to-day operational management of identity security, Microsoft 365 security, PKI lifecycle, firewall monitoring, and Azure cloud security controls within a hybrid Zero Trust architecture.
Administer Active Directory and ADFS operations
Maintain Entra ID configurations and policies
Monitor Azure AD Connect synchronisation health
Support SSO integrations (SAML, OAuth, OIDC)
Enforce and troubleshoot Conditional Access policies
Manage MFA enrollment and troubleshooting
Monitor Azure Firewall logs and alerts
Validate ExpressRoute security posture
Review Private Endpoint and Private Link configurations
Monitor Microsoft 365 security dashboards
Manage and administer CyberArk EPM & PAM
Administer Trend Micro email and endpoint security alerts
Manage PKI certificate renewals and deployments
Troubleshoot SSL and encryption issues
Investigate medium-level security incidents
Provide audit evidence and compliance reporting support
Maintain updated security SOPs and documentation
Participate in DR and security validation testing
Escalate complex threats to L3 Security Engineer

Requirements

Bachelor's degree or equivalent qualification in IT/Computing
Possess hands-on experience and strong technical knowledge in Microsoft Identity & Access Management (IAM), Active Directory, ADFS, Microsoft Entra ID, Azure infrastructure, and enterprise security solutions.
Familiarity with authentication protocols, MFA, Conditional Access Policies, cloud networking, endpoint security, privileged access management, Microsoft 365 security, and certificate management is required.
Experience in supporting, managing, and troubleshooting enterprise identity and security infrastructure

Shortlisted candidates will be offered a 1 year agency contract employment.