IT Security Engineer

About the role

Responsibilities

• Operate MDM across macOS, iOS, Windows, and Android, including enrollment, compliance policies, and configuration baselines.
• Own EDR deployment, detection tuning, and response workflows.
• Manage Okta or comparable workforce identity architecture, SSO, conditional access, MFA or passwordless enrollment, and lifecycle automation integrated with Google Workspace.
• Operate secure email filtering, DMARC/DKIM/SPF posture, and email threat response.
• Design DLP controls across email, endpoints, and SaaS, aligned to data classification.
• Manage password-manager vault architecture, sharing policies, and individual and shared credential lifecycles.
• Automate provisioning, deprovisioning, access reviews, and entitlement management across the security stack.
• Script and integrate routine IT security operations; assess AI agents for triage, ticket handling, and access reviews.
• Partner with GRC on control evidence, audit readiness, and CBUAE, ISO 27001, and SOC 2 control mapping.
• Partner with DevSecOps/SRE to align workforce and infrastructure identity patterns.

Must-have qualifications

• At least 4 years in IT Security, Corporate Security Engineering, or IT Infrastructure with direct hands-on ownership of security tooling.
• Hands-on MDM experience, including enrollment and compliance-policy design.
• Hands-on EDR experience with Checkpoint or a comparable platform.
• Hands-on Okta or comparable identity-provider administration, including SSO, conditional access, and lifecycle automation.
• Security-level administration of Google Workspace or a comparable productivity suite such as Microsoft 365.
• Experience implementing DLP across email, endpoints, or SaaS.
• Experience administering an enterprise password manager such as 1Password or Bitwarden.
• Strong Python or equivalent scripting and API-based IT security workflow automation experience.
• Ability to work across GRC, DevOps, and IAM stakeholders; comfort operating in a regulated or compliance-heavy environment.

Nice to have

• Secure Email Gateway experience beyond native Google or Microsoft filtering; low-code workflow tools such as Tines or Torq.
• Experience evaluating or deploying AI agents or LLM automation for IT operations or security triage.
• Bank, fintech, or ADGM/CBUAE-regulated environment experience; familiarity with SOC 2, ISO 27001:2022, or CBUAE technology-risk controls.
• Zero Trust device-trust conditional access; vendor/SaaS security triage for new-tool onboarding.
• Jamf Certified Expert, Microsoft Certified: Endpoint Administrator, or Okta Certified Professional certification.

First 60 days