Security Engineer – Managed Security Services

About the role

We are seeking a hands‑on Security Engineer (or Senior Security Engineer) to join a Managed Security Services team supporting a key US client. This permanent position will start with a nine‑month engagement and then expand to broader security projects across the organisation’s client portfolio.

Key responsibilities

• Manage corporate devices via Microsoft Intune across Windows, macOS, iOS and Android.
• Create and maintain compliance policies, configuration profiles, application deployments and remediation workflows.
• Package and deploy Win32 applications and administer the Company Portal.
• Control software updates using Windows Update for Business and Intune update rings.
• Define and roll out security baselines for Windows endpoints and servers.
• Monitor configuration drift, manage phased security rollouts and strengthen critical workloads.
• Support data‑flow mapping, validate encryption and access controls for sensitive data.
• Build account inventories and manage user/group lifecycle in Microsoft Entra ID and on‑prem AD.
• Conduct privileged‑access reviews, configure RBAC, Conditional Access, Identity Protection and other privileged controls.
• Deploy phishing‑resistant MFA methods (FIDO2 keys, Windows Hello for Business, Microsoft Authenticator) and configure password‑less sign‑in.
• Set up Self‑Service Password Reset with password write‑back to on‑prem AD and manage Entra ID Password Protection.
• Produce security evidence, process guides, configuration records and technical documentation.
• Collaborate closely with an onshore security lead and client IT teams.

Required profile

• 2–4 years of hands‑on experience in security engineering, endpoint security, identity and access management or a related field.
• Strong practical experience with Microsoft Intune, including device enrollment, compliance policies, Win32 packaging, Company Portal administration, Windows Update for Business and Conditional Access integration.
• Production‑level experience with Microsoft Entra ID (Azure AD), covering user/group lifecycle management, privileged‑role assignments, RBAC, Conditional Access policy design, MFA/password‑less authentication, SSPR, password write‑back, Password Protection, Identity Protection and risk‑based access controls.

Required skills

• Microsoft Intune
• Microsoft Entra ID / Azure AD
• Windows, macOS, iOS, Android device management
• Win32 application packaging
• Company Portal administration
• Windows Update for Business
• Conditional Access
• RBAC and Identity Protection
• MFA (FIDO2, Windows Hello for Business, Microsoft Authenticator)
• Self‑Service Password Reset & password write‑back
• Entra ID Password Protection
• Security baseline definition and deployment