Security Engineer L3 – 1‑Year Renewable Contract

About the role

We are seeking a senior Security Engineer (Level 3) on a 1‑year renewable contract to lead our enterprise identity and cloud security initiatives. The role is based in Singapore and focuses on designing, governing, and enforcing Zero Trust and Microsoft security architectures across hybrid environments.

Key responsibilities

• Design and govern enterprise identity security architecture, including Entra ID and federation strategies.
• Architect and enforce Zero Trust policies, secure Azure Landing Zones, and manage hybrid connectivity.
• Govern ExpressRoute, Private Link, and data‑flow architectures.
• Lead Conditional Access framework and PKI lifecycle governance.
• Define Microsoft 365 security standards and oversee email encryption, RMS, and advanced threat investigations.
• Coordinate enterprise‑level security incident response and ensure compliance with IT security governance frameworks.
• Provide executive‑level security reporting and drive improvement road‑maps.
• Support audit reviews, compliance assessments, and mentor junior security team members.

Required profile

• Degree in IT or a related discipline.
• Strong experience with Active Directory (multi‑forest), ADFS, Microsoft Entra ID, Azure AD B2C, and related identity technologies.
• Hands‑on experience with Azure Landing Zones, ExpressRoute, Azure Firewall, Private Link/Endpoints.
• Proven track record implementing Zero Trust and Conditional Access architectures.
• Preferred certifications: CISSP, AZ‑500, SC‑300, SC‑200.

Required skills

• Active Directory (Multi‑Forest), ADFS
• Microsoft Entra ID, Azure AD B2C, Microsoft Identity Manager, Azure AD Connect
• LDAP, SAML, OAuth, OIDC, WS‑Fed
• Azure Landing Zone, Hub‑and‑Spoke network model, ExpressRoute, Azure Firewall, Private Link & Private Endpoints
• Conditional Access, Zero Trust Architecture
• Microsoft 365 Security Architecture, Exchange Online Security
• Trend Micro Email & Cloud App Security, Microsoft RMS
• CyberArk EPM & PAM, DigiCert Managed PKI, Enterprise Certificate Lifecycle Governance
• Email Encryption & Digital Signing
• Azure Monitor, Log Analytics, Microsoft Defender, Advanced Security Analytics

What we offer

• Competitive monthly salary SGD 8,000‑16,000
• 1‑year renewable contract with potential extension
• Opportunity to lead high‑impact security initiatives in a dynamic cloud environment