Security Engineer
Codec Ireland
full-time
Posted on:
Location Type: Hybrid
Location: Dublin • 🇮🇪 Ireland
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
AzureCloudVault
About the role
- Deploy, configure, and maintain core Microsoft security technologies, including Azure Networking Security components (Azure Firewall, NSGs, Azure WAF) and Entra ID services (Conditional Access, PIM, Entra Private Access).
- Execute the onboarding and fine-tuning of the Microsoft Defender suite (e.g., Defender for Endpoint, Defender for Cloud, Defender for Office 365) across customer environments.
- Implement and manage Microsoft Sentinel for security information and event management (SIEM), including connector deployment, playbook automation, and custom rule creation.
- Implement and configure Microsoft Purview capabilities, including Data Loss Prevention (DLP) policies, Information Protection (sensitivity labels, encryption), and records management features.
- Configure eDiscovery, communication compliance, and audit log settings within Purview to meet regulatory and data protection requirements (e.g., GDPR, ISO 27001).
- Define and apply data classification schemes and retention policies across various data sources using Purview tools.
- Implement and manage Microsoft Intune policies for endpoint security, compliance, and device configuration.
- Configure advanced Identity and Access Management (IAM) solutions within Entra ID, focusing on least privilege principles and identity governance.
- Perform security hardening and ensure operational compliance through the implementation of Azure Policy, and resource locks.
- Produce clear, detailed, and up-to-date technical runbooks, configuration guides, and "as-built" documentation for all implemented security and compliance solutions.
Requirements
- Deep, hands-on experience with the deployment and configuration of Microsoft Azure security services (Azure Policy, Network Security, Key Vault) and E5 Security.
- Expert proficiency in configuring and managing Entra ID (formerly Azure AD), including advanced features like Conditional Access Policies, PIM, MFA, and SSO integrations.
- Proven implementation experience with the Microsoft Defender Suite and Microsoft Sentinel.
- Practical hands-on experience implementing Microsoft Purview, specifically configuring DLP policies, sensitivity labeling, and retention labels.
- Strong practical knowledge of managing security controls for Windows and mobile endpoints using Microsoft Intune.
- Excellent ability to follow detailed technical implementation plans and execute tasks efficiently.
- Strong troubleshooting and analytical skills to diagnose and resolve complex technical security and compliance issues.
- Meticulous attention to detail in technical configuration and "as-built" documentation.
- Current Microsoft certifications such as AZ-500 (Azure Security Engineer Associate), SC-200 (Microsoft Security Operations Analyst), or SC-400 (Microsoft Information Protection Administrator).
- Practical experience applying security and compliance frameworks such as ISO 27001 or NIST during implementation.
- Familiarity with automation and scripting tools (e.g., PowerShell, Azure CLI, ARM/Bicep templates) to streamline deployments.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
Microsoft Azure security servicesEntra IDMicrosoft Defender SuiteMicrosoft SentinelMicrosoft PurviewData Loss Prevention (DLP)Microsoft IntuneIdentity and Access Management (IAM)Azure Policyscripting tools
Soft skills
troubleshootinganalytical skillsattention to detailability to follow implementation plansexecution efficiency
Certifications
AZ-500SC-200SC-400