IT Security Engineer

Job description

The IT Security Engineer role involves managing and supporting endpoint management via Microsoft Intune/MDM, securing Microsoft 365 E5 environment, and handling PKI and digital certificate infrastructure. Responsibilities: administer and support Intune and MDM for Windows, iOS/iPadOS, and Android devices, configure enrollment, compliance, configuration profiles, security policies, and app deployment, support Windows Autopilot, MAM, and endpoint security policies, integrate Intune with Microsoft Entra ID, Conditional Access, and Microsoft Defender, troubleshoot enrollment, policy, application, and authentication issues, support certificate deployment to endpoints through Intune and enterprise PKI. Manage Microsoft 365 E5 security capabilities including Entra ID, Microsoft Defender, Conditional Access, and Microsoft Purview, configure security and access policies based on users, devices, applications, and risk, harden Microsoft 365 security and endpoint baselines, troubleshoot identity, authentication, device compliance, and security-policy issues. Administer enterprise PKI and AD CS, manage Root CA and Issuing/Subordinate CA, create and manage certificate templates, enrollment policies, and auto-enrollment, issue, renew, revoke, and troubleshoot digital certificates, manage certificate lifecycle for users, endpoints, servers, applications, and network devices, manage CRL/OCSP and resolve certificate chain, trust, enrollment, and authentication issues

Requirements

• strong hands-on experience with Microsoft Intune/MDM
• strong hands-on experience with Microsoft 365 E5
• strong hands-on experience with Entra ID
• strong hands-on experience with Microsoft AD CS
• strong hands-on experience with Issuing CAs
• proficiency in digital certificates and cryptography
• practical knowledge of symmetric/asymmetric encryption, public/private keys, digital signatures, hashing, and key management
• knowledge of RSA, ECC, AES, TLS/SSL
• required technical skills: Microsoft Intune/MDM
• Microsoft Entra ID
• Microsoft Defender & Conditional Access
• Microsoft AD CS/PKI
• Issuing CA/Subordinate CA
• certificate
• compliance

Skills