安全工程师

The Security Engineer will design, support, and enhance identity and access services across Active Directory, Microsoft Entra, and enterprise applications. This role requires strong technical depth, advanced troubleshooting ability, automation expertise, and the capability to leverage AI-driven tools to modernize and streamline IAM operations.
Key Responsibilities

• Manage and optimize Active Directory, Entra ID, authentication, authorization, policies, and access models.

• Lead integration of identity services across on-prem and cloud platforms.

• Develop and maintain automation scripts (PowerShell) for provisioning, access reviews, and operational workflows.

• Troubleshoot complex identity and access issues across AD, Entra, applications, and IAM services.

• Support audits, compliance activities, and maintain clear documentation.

• Collaborate with Security, Infrastructure, and Application teams on IAM initiatives.

• Use AI-driven tools (e.g., Microsoft Copilot, Entra AI features, Sentinel analytics) to automate investigations, ticket triage, access reviews, and security analysis.

• Develop or enhance AI-assisted scripts, playbooks, or workflows that reduce manual workload and improve efficiency.

Required Skills & Experience

• Strong hands-on experience with Active Directory (GPOs, domain controllers, DNS/DHCP, trusts).

• Deep knowledge of Microsoft Entra ID / Azure AD identity management.

• Proficiency in PowerShell scripting and identity automation.

• Experience with federation, SSO, MFA, conditional access, and identity governance practices.

• Familiarity with ITSM platforms (ServiceNow preferred).

• Experience using privileged access tools (PAM360, CyberArk, or similar) is a plus.

• Experience integrating or using AI-driven security tools (Entra ID Protection, Sentinel, Copilot for Security).

Originally posted on Himalayas