Cloud Security Engineer

A challenging role as part of the global Enterprise Security Services team focusing on Active Directory and Azure Cloud solutions. Being a large enterprise we have a complex setup of active directory, Azure and complimenting product suits to support some of the processes. Security is center stage and primary focus.

All solutions will have highest security principles inherent in the design; this requires a broad level of systems integration knowledge, an analytical and security focused mindset with technical hands-on experience.

You will contribute on strategic global projects where deep technical knowledge and core infrastructure skills are required. You will be responsible for technical design, testing, documentation and implementation of solutions focused around the Active Directory Platform. You will work closely with key stakeholders to help build out a well-defined operational model.

You will be a member of a small team that forms part of the broader Enterprise Security Services organization. The team has a geographic spread, with main hub sites in PL, Raleigh (US) and Singapore. The team has a strong background in on premise Directory Services, authentication and automation (e.g. provisioning systems).

• Maintain, monitor and deploy security baselines and automation solutions for Azure hybrid cloud identity platform.
• Support the global identity platform(s), troubleshooting authentication and authorization across cloud services (SaaS, PaaS, IaaS, CaaS).
• Support Azure B2B and SaaS integration, partner federation, related tenant security controls (Zero-Trust) and entitlement management.
• Support M365 and general cloud adoption for applications and platforms (Azure focused).
• Operate and maintain cloud identity provisioning systems and automation processes - AADConnect/Microsoft Identity Manager/custom scripts.
• Work on multiple projects in parallel; must be proficient in ranking and managing priorities.
• Create various types of technical documentation, such as run books, operating guides, design documents, architectural documentation, gap analysis, diagrams.
• Administer and support internal DNS
• Act as an internal consultant to IT teams for Directory related solutions

• Minimum 3 years of experience in enterprise scale cloud security environment and confirmed experience of 5 years in enterprise scale Active Directory environment preferably in the finance sector.
• Strong knowledge of Cloud Security, specifically in the area of Azure and SaaS collaboration products (M365, Zoom, G-Suite a plus).
• Hands-on experience with SIEM analysis: Kusto/KQL, Azure Sentinel and Splunk.
• Strong knowledge of Identity and Access Management, Modern authentication / SSO and authorization.
• Good knowledge of MAM (InTune, ByOD) operational processes.
• Hands-on experience in automation (powershell scripting or equivalent). Administrating scripts
• AD Restore, Forest and Domain Recovery Using QUEST RMAD Tool
• Excellent analytical / problem solving skills
• Excellent interpersonal and communication skills
• A personality with fluent verbal and written communication skills in English.
• Strong teamwork and communication / information sharing skills with sense of responsibility, attention to detail and proactive management as well as strong situational analysis and decision making abilities.

• Previous experience in Banking or non-banking financial institute is desirable
• AWS Control Tower experience considered a plus but not a requirement.
• Azure security qualifications considered a plus

• Competitive salary
• Luxoft Training Center
• Access to e-learning Library
• Individual development plans
• Long-term cooperation with possibility to gain experience in different projects and technologies
• A significant number of professional communities (Agile Community, Tech Community, Business Analysis Community, etc.)

• Group Life Insurance
• Private healthcare insurance – LuxMed. Unlimited access to specialist consultations with Dental Care included
• Medical costs reimbursement for employees (up to certain amount per quarter)
• Travel Insurance
• Benefit Program - Cafeteria and Multisport Card

• Various communities (sport, recreation activities, trips, board games, cultural and educational activities)
• Discounts program for employees – BeLux (banking offer, car leasing offer and cafeteria program discount)
• Convenient locations in a modern offices with game rooms
• Multinational projects for clients all over the world