Deskripsi pekerjaan
Perusahaan mencari IT Security and Infrastructure Engineer terampil untuk memegang kendali utama atas postur keamanan cloud, manajemen identitas, dan kerangka kepatuhan, khususnya dalam lingkungan Microsoft 365. Anda akan memastikan lingkungan Microsoft Entra ID dan Intune beroperasi secara aman, efisien, dan berskala besar dengan prinsip Zero Trust dan Least Privilege. Selain keamanan, Anda akan memanfaatkan keahlian infrastruktur untuk memelihara jaringan inti serta lingkungan cloud, sekaligus menyediakan dukungan tingkat lanjut untuk operasional IT sehari-hari. Tanggung jawab harian mencakup pengelolaan arsitektur identitas, rekayasa keamanan dan pertahanan ancaman, pemeliharaan infrastruktur cloud AWS/Azure, serta otomatisasi proses menggunakan platform seperti Microsoft Power Automate dan Python.
Tanggung jawab: 1. Identity Architecture & MS365 Administration; Act as the Global Administrator, managing and scaling Microsoft Entra ID (Azure AD) and the broader MS365 ecosystem; Architect and maintain seamless onboarding and offboarding workflows (e.g., auto provisioning M365, Slack, AWS/Azure access) through Intune; Design and enforce policies to separate administrative privileges securely; Design, implement, and maintain our MDM/MAM environment (Microsoft Intune) to ensure 100% automated provisioning via Windows Autopilot; 2. Security Engineering, Compliance & Threat Defense; Deploy, monitor, and continuously tune Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Cloud Apps (MDCA) to reduce false positives; Implement advanced security governance, including complex Conditional Access policies, automated access reviews, and Just-In-Time (JIT) privilege escalation; Manage Data Loss Prevention (DLP) and Data Lifecycle Management via Microsoft Purview; Conduct regular vulnerability testing and implement Attack Surface Reduction (ASR) rules; 3. IT Infrastructure & Operation Support; Serve as the escalation point for complex day-to-day IT support and troubleshooting; Maintain basic cloud server infrastructure across Azure and AWS; Maintain fundamental network infrastructure (routing, switching, and firewall basics); 4. Process Automation & Web Platform Management; Develop and maintain IT automation solutions using platforms such as Microsoft Power Automate, Power Apps, UiPath, Phyton, etc; Design, deploy, and maintain internal collaboration platforms, intranet portals, and websites using SharePoint Online, WordPress, and related technologies; Maintain clean, documented, and version-controlled repositories (Git) for all IT scripts, configurations, and automation workflows.
Kualifikasi: Experience: Minimum of 3 years of experience in Systems Engineering, IT Operations, Infrastructure Engineering, or a security-focused infrastructure role, with significant exposure to Microsoft 365 security technologies; Identity & Endpoint Management Expertise: Strong hands-on and architectural knowledge of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot; Security Expertise: Practical experience with Microsoft Defender and Microsoft Purview solutions, with a proven ability to implement Zero Trust and Least Privilege security models; Infrastructure Knowledge: Solid understanding of networking fundamentals and basic cloud infrastructure administration.
Tanggung jawab
- 1. Identity Architecture & MS365 Administration
- Act as the Global Administrator, managing and scaling Microsoft Entra ID (Azure AD) and the broader MS365 ecosystem
- Architect and maintain seamless onboarding and offboarding workflows (e.g., auto provisioning M365, Slack, AWS/Azure access) through Intune
- Design and enforce policies to separate administrative privileges securely
- Design, implement, and maintain our MDM/MAM environment (Microsoft Intune) to ensure 100% automated provisioning via Windows Autopilot
- 2. Security Engineering, Compliance & Threat Defense
- Deploy, monitor, and continuously tune Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Cloud Apps (MDCA) to reduce false positives
- Implement advanced security governance, including complex Conditional Access policies, automated access reviews, and Just-In-Time (JIT) privilege escalation
- Manage Data Loss Prevention (DLP) and Data Lifecycle Management via Microsoft Purview
- Conduct regular vulnerability testing and implement Attack Surface Reduction (ASR) rules
- 3. IT Infrastructure & Operation Support
- Serve as the escalation point for complex day-to-day IT support and troubleshooting
- Maintain basic cloud server infrastructure across Azure and AWS
- Maintain fundamental network infrastructure (routing, switching, and firewall basics)
- 4. Process Automation & Web Platform Management
- Develop and maintain IT automation solutions using platforms such as Microsoft Power Automate, Power Apps, UiPath, Phyton, etc
- Design, deploy, and maintain internal collaboration platforms, intranet portals, and websites using SharePoint Online, WordPress, and related technologies
- Maintain clean, documented, and version-controlled repositories (Git) for all IT scripts, configurations, and automation workflows
Kualifikasi
- Experience: Minimum of 3 years of experience in Systems Engineering, IT Operations, Infrastructure Engineering, or a security-focused infrastructure role, with significant exposure to Microsoft 365 security technologies
- Identity & Endpoint Management Expertise: Strong hands-on and architectural knowledge of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot
- Security Expertise: Practical experience with Microsoft Defender and Microsoft Purview solutions, with a proven ability to implement Zero Trust and Least Privilege security models
- Infrastructure Knowledge: Solid understanding of networking fundamentals and basic cloud infrastructure administration
Informasi lowongan
- Tipe pekerjaan
- Contract
- Gaji
- Negosiasi