Senior Security Engineer

The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity, messaging, authentication, monitoring and security integrations. The role provides strategic security input, develops technical designs, secure integration, documentation and operational governance of Microsoft Entra ID, Active Directory, Exchange, Microsoft Sentinel, Silverfort, PKI, DNS and related enterprise services.

The role provides security expertise for business-critical application integrations, including Microsoft 365, Azure, HR, ERP and third-party platforms, ensuring secure access, provisioning, logging, monitoring, resilience and compliance closely working with security partners and internal IT teams.

Key Responsibilities

Security Partnerships

Partner with internal cybersecurity teams, external security vendors, technology partners, and business stakeholders to design, implement, and continuously improve enterprise security controls and capabilities.

Implementation of NIST Cybersecurity Framework (CSF) and industry security best practices across identity, cloud, infrastructure, messaging, monitoring, and business application platforms.

Assess security risks, recommend remediation strategies, and lead the implementation of security improvements, ensuring alignment with enterprise security standards, compliance requirements, and Zero Trust principles.

Identity & Access Security

Own Microsoft Entra ID, Active Directory, Azure AD Connect and cloud synchronization architecture, health and security.

Manage identity automation scripts, Administrative Units, RBAC, Conditional Access, MFA, domains, trusts and privileged access controls.

Design secure SSO, authentication, user lifecycle and provisioning integrations for Microsoft 365 and other enterprise applications.

Validate service accounts, API permissions, role mappings, access reviews and joiner-mover-leaver controls for integrated platforms.

Security Platforms

Lead Microsoft Sentinel management, documentation, data onboarding, detection use cases, workbooks and operational support.

Integrate and monitor logs from Domain Controllers, Azure, Exchange, servers, applications and security platforms.

Define logging, retention, alerting, incident workflow and operational runbook standards.

Tune analytics rules and dashboards to improve detection quality, investigation and response.

Effective use of Microsoft Security Copilot and AI-powered security capabilities to improve threat detection, investigation, and incident response.

Evaluate, secure, and govern AI integrations and enterprise AI solutions, ensuring compliance with security, privacy, identity, and NIST best practices.

Silverfort & Authentication Security

Serve as the Silverfort SME, platform owner and primary technical point of contact.

Design, build, configure and operate Silverfort nodes in Azure and hybrid environments.

Manage integrations, authentication policies, licensing, vendor engagement, upgrades, health monitoring, high availability and recovery testing.

Messaging, PKI & Enterprise Services

Provide security oversight for Exchange Online, Hybrid Exchange, load balancers, mail flow, Exchange rules and Teams integrations.

Manage Enterprise Certificate Authority, public certificates, PKI, KMS and certificate lifecycle controls.

Oversee public DNS, domain registration and deregistration, billing, DMARC, SPF and DKIM.

Architecture, Integration & Governance

Act as the security design authority and SME for cloud, identity, HR, ERP, business application and third-party integrations.

Review authentication, authorization, data flows, APIs, service principals, service accounts, certificates, and SIEM logging.

Maintain reference architectures, diagrams, standards, runbooks, dependency maps and recovery procedures.

Support audits, compliance reviews, security incidents, platform upgrades and Domain Controller post-upgrade testing.

Enviri GSC handles a wide range of services, including finance and accounting shared services, global HR shared services, providing IT services and helpdesk support, and market research support to Harsco globally. We have been operating since 2008 & serving 30+ Countries