Security Engineer L2 – 1 Year Renewable Contract

About the role

We are seeking a Security Engineer L2 to join our team on a 1‑year renewable contract in Singapore. You will be responsible for maintaining and securing our Microsoft and Azure identity infrastructure, as well as supporting broader cloud security controls.

Key responsibilities

• Administer Active Directory, ADFS, and Entra ID configurations and policies.
• Monitor Azure AD Connect health and support SSO integrations (SAML, OAuth, OIDC).
• Enforce Conditional Access policies and manage MFA enrollment.
• Monitor Azure Firewall logs, ExpressRoute security posture, and Private Endpoint/Link configurations.
• Maintain Microsoft 365 security dashboards and manage Trend Micro email/endpoint alerts.
• Administer CyberArk EPM & PAM solutions.
• Handle PKI certificate renewals, SSL encryption issues, and DigiCert managed PKI.
• Investigate medium‑level security incidents and provide audit evidence.
• Maintain up‑to‑date SOPs, participate in DR testing, and escalate complex threats to L3.

Required profile

• Degree in IT or related discipline.
• Hands‑on experience with Microsoft identity services and cloud security tools.
• Ability to troubleshoot authentication, encryption, and network security issues.

Required skills

• Active Directory / ADFS
• Entra ID & Azure AD Connect
• Microsoft Identity Manager (MIM)
• SAML, OAuth, OIDC
• Conditional Access & MFA (including Symantec VIP)
• Azure Firewall, ExpressRoute, Private Endpoint, Private Link
• Hub‑and‑Spoke Architecture
• Microsoft 365 Security & Exchange Online Protection
• Trend Micro Security Suite
• CyberArk EPM & PAM
• Microsoft Rights Management Services (RMS)
• DigiCert Managed PKI & SSL Certificate Management

What we offer

• Competitive monthly salary (SGD 6,000‑8,000)
• One‑year renewable contract with potential extension
• Opportunity to work with leading security technologies in a dynamic environment