Corporate IT Security Engineer
About the role
The Corporate IT Security Engineer is responsible for administering and securing Microsoft Entra ID, Microsoft 365, and Azure tenant configurations, as well as managing macOS devices using Jamf Pro. The role involves implementing least-privilege access, monitoring security alerts, and supporting IT operations through helpdesk support, automation of IT processes, and documentation. The engineer will also own technical controls for SOC 2 and GDPR compliance, maintain the GRC platform, coordinate audits, and support security awareness initiatives. Candidates should have 3–5 years of relevant experience, hands-on expertise with Microsoft and macOS administration, automation skills, and practical experience with compliance frameworks. A bachelor's degree in a related field or equivalent experience is required.
Must have
- 3–5 years of experience in IT systems administration, security engineering, or a related field, including hands-on work operating security or compliance controls.
- Hands-on administration of Microsoft Entra ID and Microsoft 365, including Conditional Access, MFA, role-based access, and SSO application integration.
- Working experience with Microsoft Azure administration and security (e.g., RBAC, Azure Policy, resource and identity security).
- Experience managing macOS devices with Jamf Pro.
- Demonstrated experience automating IT processes using scripting (PowerShell, Bash/zsh, or Python) and low-code/no-code tools (Power Automate, Logic Apps, or similar). You should be able to walk us through workflows you have built and the manual effort they removed.
- Practical experience supporting SOC 2 (Type II preferred), GDPR, or similar frameworks, including evidence collection and remediation.
- Comfortable working independently, managing competing priorities across IT operations and security work.
- Strong communication skills — able to translate technical and compliance requirements for non-technical stakeholders.
- Bachelor's degree in Information Technology, Computer Science, or a related field (or equivalent experience).
Nice to have
- Experience with a GRC/compliance automation platform such as Drata or Vanta.
- Experience with Microsoft Intune and Microsoft Defender for Endpoint or Defender XDR.
- Familiarity with AWS identity and access management (IAM) concepts.
- Relevant certifications, such as Microsoft SC-300 (Identity and Access Administrator), SC-500 (Cloud and AI Security Engineer) or its predecessor AZ-500, Jamf Certified Tech or Admin, or CompTIA Security+.
Technologies
- Atlassian
- AWS
- Azure
- Bash
- CompTIA Security+
- DevOps
- Microsoft Entra ID
- IAM
- Intune
- Jamf
- macOS
- Microsoft 365
- Penetration Testing
- Power Automate
- PowerShell
- Python
- RBAC
- SaaS
- Salesforce
- SOC 2
- SSO
- XDR
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka