IT Security Engineer- KSA

Job Summary

We are looking for an experienced IT Engineer – Endpoint Management, PKI & Microsoft 365 E5 to manage and support enterprise endpoint management, Microsoft 365 E5 security capabilities, PKI/Certificate Authority infrastructure, and cryptographic services.

The ideal candidate will have strong hands-on experience with Microsoft Intune/MDM, Microsoft 365 E5, Entra ID, Microsoft AD CS, Issuing CAs, digital certificates, and cryptography.

Key Responsibilities

1- Endpoint Management – Intune & MDM

• Administer and support Microsoft Intune and MDM environments.
• Manage Windows, iOS/iPadOS, Android, and corporate endpoint devices.
• Configure device enrollment, compliance policies, configuration profiles, security policies, and application deployment.
• Support Windows Autopilot, MAM, and endpoint security policies.
• Integrate Intune with Microsoft Entra ID, Conditional Access, and Microsoft Defender.
• Troubleshoot device enrollment, compliance, policy, application, and authentication issues.
• Support certificate deployment to endpoints through Intune and enterprise PKI.

2- Microsoft 365 E5

• Administer and support Microsoft 365 E5 security and endpoint capabilities.
• Manage and support Entra ID, Microsoft Defender, Intune, Conditional Access, and Microsoft Purview.
• Configure security and access policies based on users, devices, applications, and risk.
• Support Microsoft 365 security hardening and endpoint security baselines.
• Troubleshoot identity, authentication, device compliance, and security-policy issues.
• Support Microsoft 365 security assessments, compliance requirements, and security improvement initiatives.

3- PKI / Certificate Authority

• Administer enterprise PKI and Microsoft Active Directory Certificate Services (AD CS).
• Manage Root CA and Issuing/Subordinate CA environments.
• Create and manage certificate templates, enrollment policies, and auto-enrollment.
• Issue, renew, revoke, and troubleshoot digital certificates.
• Manage certificate lifecycle for users, endpoints, servers, applications, and network devices.
• Manage CRL/OCSP and troubleshoot certificate chain, trust, enrollment, and authentication issues.
• Integrate PKI with Intune, Active Directory, VPN, Wi-Fi, applications, and infrastructure.
• Support commercial CA platforms such as DigiCert where required.

4- Cryptography

• Strong understanding of enterprise cryptography and PKI concepts.
• Practical knowledge of symmetric/asymmetric encryption, public/private keys, digital signatures, hashing, and key management.