enviricorporation
Senior Security Engineer
Senior Security Engineer acting as the enterprise security SME for identity, messaging, authentication and monitoring — owning Microsoft Entra ID, Active Directory, Exchange, Microsoft Sentinel, Silverfort, PKI and DNS, and designing secure integrations with Microsoft 365, Azure, HR and ERP platforms with a Zero Trust / NIST CSF focus.
- Compensation
- Not disclosed
- Location
- Hyderabad, Telangana, in
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- 6-8 years of experience in security engineering, identity, infrastructure security or security architecture
- Strong expertise in Entra ID, Active Directory, Azure AD Connect, Exchange, Microsoft Sentinel, Silverfort, PKI and Azure security
- Experience securing SaaS and enterprise integrations, Microsoft 365, HR and ERP platforms
- Working knowledge of SAML, OAuth/OIDC, APIs, Microsoft Graph, service principals, certificates and privileged access controls
- Proficiency in PowerShell automation, SIEM integration, troubleshooting, and security documentation
Nice to have
- Desirable certifications: CISSP, CISM, SC-100, SC-300, SC-200 or AZ-500
Full description
About the Role
- The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity, messaging, authentication, monitoring and security integrations. The role provides strategic security input, develops technical designs, secure integration, documentation and operational governance of Microsoft Entra ID, Active Directory, Exchange, Microsoft Sentinel, Silverfort, PKI, DNS and related enterprise services.
- The role provides security expertise for business-critical application integrations, including Microsoft 365, Azure, HR, ERP and third-party platforms, ensuring secure access, provisioning, logging, monitoring, resilience and compliance closely working with security partners and internal IT teams.
- Key Responsibilities
- Security Partnerships
- Partner with internal cybersecurity teams, external security vendors, technology partners, and business stakeholders to design, implement, and continuously improve enterprise security controls and capabilities.
- Implementation of NIST Cybersecurity Framework (CSF) and industry security best practices across identity, cloud, infrastructure, messaging, monitoring, and business application platforms.
- Assess security risks, recommend remediation strategies, and lead the implementation of security improvements, ensuring alignment with enterprise security standards, compliance requirements, and Zero Trust principles.
- Identity & Access Security
- Own Microsoft Entra ID, Active Directory, Azure AD Connect and cloud synchronization architecture, health and security.
- Manage identity automation scripts, Administrative Units, RBAC, Conditional Access, MFA, domains, trusts and privileged access controls.
- Design secure SSO, authentication, user lifecycle and provisioning integrations for Microsoft 365 and other enterprise applications.
- Validate service accounts, API permissions, role mappings, access reviews and joiner-mover-leaver controls for integrated platforms.
- Security Platforms
- Lead Microsoft Sentinel management, documentation, data onboarding, detection use cases, workbooks and operational support.
- Integrate and monitor logs from Domain Controllers, Azure, Exchange, servers, applications and security platforms.
- Define logging, retention, alerting, incident workflow and operational runbook standards.
- Tune analytics rules and dashboards to improve detection quality, investigation and response.
- Effective use of Microsoft Security Copilot and AI-powered security capabilities to improve threat detection, investigation, and incident response.
- Evaluate, secure, and govern AI integrations and enterprise AI solutions, ensuring compliance with security, privacy, identity, and NIST best practices.
- Silverfort & Authentication Security