F5/CloudFlare/LB/GTM- Network_Security_Engineer
Key Skills for This Role
Full Job Posting
Qualifications
- Education: Bachelor's / college degree in Computer Science, Information Technology, or a related field.
- Experience: 4-6 years of IT experience, including at least 2-3 years of hands-on cloud security or cloud operations work at L2 level. Practical experience administering Microsoft Entra ID (RBAC, PIM, App Registrations, Conditional Access) and operating Microsoft Defender products is required. Experience working tickets within an incident and change management process (ITSM) is required. Exposure to GCP or OCI is a plus.
- Certifications: Relevant professional certifications are desirable. These may include, but are not limited to:
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Endpoint Administrator Associate (MD-102)
- Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
- Google Cloud Certified: Associate Cloud Engineer
- Vendor-agnostic certifications (CompTIA Security+, CCSK, etc.)
- Technical Skills: Hands-on experience with Microsoft Entra ID, Azure RBAC, Azure Policy, Microsoft Defender for Cloud, Defender for Servers and Endpoint, Microsoft Intune, and Azure Key Vault. Familiarity with Logic Apps, Defender for Containers / AKS, and GCP Certificate Authority Service. Basic scripting ability (PowerShell, Azure CLI, or KQL) for investigation and routine tasks.
- Knowledge: Solid understanding of identity and access concepts, PKI fundamentals (certificate lifecycle, key management, trust chains), and common cloud security threats. Ability to follow runbooks accurately, prioritise a ticket queue, and know when and how to escalate.
- Soft Skills: Clear written and verbal communication, strong attention to detail in ticket documentation, and the ability to work effectively in a team and under time pressure.
Responsibilities
- Identity and Access Management (Entra ID / Azure)
- Privileged Identity Management (PIM): Process standard role-assignment and access-elevation requests, validate approvals before actioning, and support scheduled access reviews by collecting evidence and following up on outstanding reviewers.
- App Registrations: Create app registrations and service principals per approved requests, rotate expiring secrets and certificates, and apply API permissions as specified in the request.
- Managed Identities: Provision system-assigned and user-assigned managed identities and assign the requested RBAC roles for application and platform teams.
- Conditional Access and MFA: Troubleshoot sign-in and MFA issues using sign-in logs, apply pre-approved Conditional Access changes, and manage user and group exclusions per change requests.
- SSO / Federation: Support onboarding of applications to SSO using established templates and troubleshoot common federation and SAML/OIDC issues, escalating non-standard integrations.
- Security Automation
- Logic Apps Automation: Monitor existing Logic Apps security automations (IOC blocking, agent health checks, DNS change alerting), investigate failed runs, perform first-line fixes, and make minor updates under guidance.
- Cloud Security Operations
- Alert Triage and Incident Response: Triage security alerts and incidents from the queue, perform initial investigation and containment per playbooks, and escalate confirmed or high-severity incidents to L3 with documented evidence.
- Azure Policy: Identify and remediate non-compliant resources flagged by Azure Policy, and apply policy assignments and exemptions per approved change requests.
- Defender for Cloud: Review secure score and security recommendations daily, raise and track remediation tasks with resource owners, and report progress against agreed targets.
- Defender for Servers and Containers: Monitor threat alerts on server and container workloads (including AKS), perform initial investigation, and process just-in-time (JIT) VM access requests.
- Endpoint Security and Device Management: Perform routine administration of Microsoft Defender for Endpoint and Intune, including device onboarding, compliance troubleshooting, and application and certificate profile deployment.
- PKI and Certificate Management
- Certificate Lifecycle: Process certificate issuance, renewal, and revocation requests against internal CAs (including private CAs hosted in GCP) in line with existing PKI policy and standards.
- Key Management: Manage keys and secrets in Azure Key Vault, including scheduled rotation and access-policy or RBAC updates per approved requests.
- Inventory and Monitoring: Maintain certificate and key inventory records, monitor upcoming expiries, and raise renewal tickets well ahead of expiry dates.
- Operations and Documentation
- ITSM and Change Management: Work tickets within SLA, keep ticket notes accurate and complete, and raise standard change requests with implementation and rollback steps.
- Runbooks and Knowledge Base: Follow and help maintain runbooks and SOPs, and document resolutions so recurring issues can be handled consistently.
- Shift and On-call Support: Participate in shift handovers and an on-call rotation as required, ensuring open items are clearly communicated.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Malomatia
Executive Assistant
, QAT
Executive Assistant is responsible for providing secretarial and administrative support to Chief of SBU. The role holder must understand business priorities, demonstrate the ability to proactively anticipate needs and dr
Engineer – System
, QAT
Seeking a Senior Systems Engineer with 8+ years of experience in Linux and Windows administration, virtualization, and enterprise infrastructure management. The role involves managing VMware, Nutanix, VxRail, Zabbix Moni
Consultant – Assurance & Validation, GPU Infrastructure
, QAT
Provide independent technical assurance and validation of GPU implementation and ongoing operations. Serve as the client’s technical conscience to ensure quality, performance, and readiness of the delivered GPU platform.
Data Migration Lead
, QAT
The role requires strong migration leadership and preferably Siebel migration experience. Qualifications Proven experience leading complex, multi-entity data migration programs. Strong hands-on understanding of data prof
Azure API Management (APIM) Developer
, QAT
To own the API gateway layer that connects internal services, government entities, and external consumers. The work covers policy development, security, lifecycle automation, and developer onboarding. Qualifications Bach
Data and AI Specialist
, QAT
Deep technical expertise in data engineering, machine learning, and cloud AI services with strong governance and policy awareness, ensuring scalable, secure, and ethical use of AI in alignment with organizational goals.
Consultant – Operations Oversight & Performance, AI Infrastructure
, QAT
The Consultant – Operations Oversight & Performance, AI Infrastructure is responsible for Oversee OEM ongoing operational delivery after go-live. Ensure the GPU infrastructure AI Runtime Layer - Kubernetes, GPU schedulin
Camunda BPM Integration Support
, QAT
We are looking for an Engineer - Camunda BPM Developer to model, develop, test, deploy, administer, and support Camunda BPM workflows for entity onboarding and payment processing in a Kubernetes / OKE environment. • Mode
Executive Assistant
, QAT
Engineer – System
, QAT
Consultant – Assurance & Validation, GPU Infrastructure
, QAT
Data Migration Lead
, QAT
Azure API Management (APIM) Developer
, QAT
Data and AI Specialist
, QAT
Consultant – Operations Oversight & Performance, AI Infrastructure
, QAT
Camunda BPM Integration Support
, QAT