Senior Security Engineer

About the Role 

• The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity messaging authentication monitoring and security integrations. The role provides strategic security input develops technical designs secure integration documentation and operational governance of Microsoft Entra ID Active Directory Exchange Microsoft Sentinel Silverfort PKI DNS and related enterprise services. 
• The role provides security expertise for business-critical application integrations including  Microsoft 365 Azure HR ERP and third-party platforms ensuring secure access provisioning logging monitoring resilience and compliance closely working with security partners and internal IT teams.
• Key Responsibilities 
• Security Partnerships
• Partner with internal cybersecurity teams external security vendors technology partners and business stakeholders to design implement and continuously improve enterprise security controls and capabilities.
• Implementation of NIST Cybersecurity Framework (CSF) and industry security best practices across identity cloud infrastructure messaging monitoring and business application platforms.
• Assess security risks recommend remediation strategies and lead the implementation of security improvements ensuring alignment with enterprise security standards compliance requirements and Zero Trust principles.
• Identity & Access Security 
• Own Microsoft Entra ID Active Directory Azure AD Connect and cloud synchronization architecture health and security. 
• Manage identity automation scripts Administrative Units RBAC Conditional Access MFA domains trusts and privileged access controls. 
• Design secure SSO authentication user lifecycle and provisioning integrations for Microsoft 365 and other enterprise applications. 
• Validate service accounts API permissions role mappings access reviews and joiner-mover-leaver controls for integrated platforms. 
• Security Platforms 
• Lead Microsoft Sentinel management documentation data onboarding detection use cases workbooks and operational support. 
• Integrate and monitor logs from Domain Controllers Azure Exchange servers applications and security platforms. 
• Define logging retention alerting incident workflow and operational runbook standards. 
• Tune analytics rules and dashboards to improve detection quality investigation and response. 
• Effective use of Microsoft Security Copilot and AI-powered security capabilities to improve threat detection investigation and incident response.
• Evaluate secure and govern AI integrations and enterprise AI solutions ensuring compliance with security privacy identity and NIST best practices.
• Silverfort & Authentication Security 
• Serve as the Silverfort SME platform owner and primary technical point of contact. 
• Design build configure and operate Silverfort nodes in Azure and hybrid environments. 
• Manage integrations authentication policies licensing vendor engagement upgrades health monitoring high availability and recovery testing. 
• Messaging PKI & Enterprise Services 
• Provide security oversight for Exchange Online Hybrid Exchange load balancers mail flow Exchange rules and Teams integrations. 
• Manage Enterprise Certificate Authority public certificates PKI KMS and certificate lifecycle controls. 
• Oversee public DNS domain registration and deregistration billing DMARC SPF and DKIM. 
• Architecture Integration & Governance 
• Act as the security design authority and SME for cloud identity HR ERP business application and third-party integrations. 
• Review authentication authorization data flows APIs service principals service accounts certificates and SIEM logging. 
• Maintain reference architectures diagrams standards runbooks dependency maps and recovery procedures. 
• Support audits compliance reviews security incidents platform upgrades and Domain Controller post-upgrade testing. 

Experience:

• 6 - 8years of experience in security engineering identity infrastructure security or security architecture. 
• Strong expertise in Entra ID Active Directory Azure AD Connect Exchange Microsoft Sentinel Silverfort PKI and Azure security. 
• Experience securing SaaS and enterprise integrations Microsoft 365 HR and ERP platforms. 
• Working knowledge of SAML OAuth/OIDC APIs Microsoft Graph service principles certificates and privileged access controls. 
• Proficiency in PowerShell automation SIEM integration troubleshooting and security documentation. 
• Desirable certifications: CISSP CISM SC-100 SC-300 SC-200 or AZ-500. 
• Success Measures 
• Secure and reliable operation of identity messaging Sentinel and Silverfort platforms. 
• Secure documented and supportable integrations
• Complete SIEM visibility across identity cloud messaging Domain Controllers and priority infrastructure. 
• Current architecture diagrams runbooks ownership records and knowledge-transfer documentation. 
• Improved security posture authentication resilience audit readiness and operational recovery.

Key Technologies 

Entra ID Active Directory Azure AD Connect Microsoft Sentinel  Silverfort  Exchange Online Teams NetSuite  SuitePeople  PKI DNS DMARC Azure PowerShell Microsoft Graph SAML OAuth/OIDC SCIM SSO MFA Conditional Access KMS

Additional Information :

Disclaimer

The information about this job description given above has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties responsibilities and qualifications required of employees assigned to this job.

Remote Work :

No

Employment Type :

Full-time