Senior Security Operations Engineer

We are looking for a Security Operations Engineer to join our Internal IT team and strengthen our defensive capabilities. This role is crucial in bridging the gap between our external Managed Security Service Provider (MSSP) and our internal infrastructure. You will focus on Incident Response, Threat Intelligence, Identity & Access Management (IAM), Cloud Posture, and Data Loss Prevention (DLP). This is a unique opportunity to not only perform security operations but also lay the foundation for a dedicated IAM capability within the SecOps stream.

Please note: While we are a consulting company, this is an internal IT role. You will be working for our own organization. You will work closely with the ISO and IT Operations Manager to secure our data, identity, and infrastructure.

As our SecOps & IAM Engineer, you will lead the design of secure user lifecycle processes, audit our access governance, and manage our vulnerability platforms. You will use your influence to guide business and internal teams toward secure practices without being a “blocker.”

Why Join us?

• Hybrid flexibility – work from home up to 3 days a week
• Flexible working hours – manage your day in a way that works for you
• Attractive benefits package – including cafeteria, private health insurance (Medicare), annual bonus, and housing allowance
• A flat, friendly, non‑bureaucratic culture – quick decisions, open communication
• A dynamic and collaborative work environment within a global IT team.
• The chance to help build an IAM capability.

Roles and Responsibilities

• Own and improve Identity & Access Management (IAM) processes across the company.
• Manage user lifecycle activities (joiners, movers, leavers) and access governance.
• Design and maintain secure role-based access controls (RBAC) and privileged access management (PIM).
• Strengthen Microsoft Entra ID security, Conditional Access, MFA, and passwordless authentication.
• Drive vulnerability management using Tenable and Microsoft Defender for Endpoint.
• Coordinate remediation efforts with infrastructure, cloud, network, and business teams.
• Act as the main security contact for external SOC/MSSP partners.
• Support proactive threat detection and security incident response.Improve security operations through ITIL-based processes and continuous optimization.
• Work closely with HR, Helpdesk, and business stakeholders to promote security best practices

Qualifications

• 5+ years of experience in Security Operations, Identity & Access Management, or System Administration.
• Strong knowledge of Microsoft Entra ID, Conditional Access, and IAM principles.
• Hands-on experience with Microsoft security solutions, including Defender, Sentinel, and Purview.
• Experience with vulnerability management and security scanning tools (Tenable or Microsoft Defender for Endpoint preferred).
• Understanding of ITIL-based service management processes.
• Experience designing and implementing Identity Governance & Administration (IGA) workflows.
• Knowledge of ISO 27001 and security governance frameworks.
• Relevant certifications such as Security+, CySA+, SC-300, SC-200, or equivalent.