System Security Engineer

Job Description:

Key Responsibilities:
1. Security Infrastructure Management:
Design, implement, and maintain Active Directory (AD), Azure AD (AAD), and hybrid identity solutions.
Manage Microsoft SCCM for patch deployment, software distribution, and OS deployment.
Administer Exchange Server/Exchange Online, including security hardening and mail flow rules.
Configure and monitor Azure Security tools (Defender for Cloud, Sentinel, RBAC).

2.Patch & Vulnerability Management:
Deploy and manage patches for Windows, Linux, and third-party applications (Adobe, Java, etc.).
Conduct vulnerability assessments (Qualys/Nessus) and prioritize remediation.
Ensure zero-day vulnerabilities are patched within SLA.

3. Network & Platform Security:
Implement firewall policies, NAC, and endpoint protection (Fortinet/Cisco/Palo Alto).
Troubleshoot Windows Server, DNS, DHCP, and Group Policy issues.
Secure Exchange Server against threats (e.g., ProxyLogon, ransomware).

4. ITIL & Compliance:
Follow ITIL v3/v4 processes (Incident, Problem, Change Management).
Maintain CMDB for IT assets and licenses.
Support audits (ISO 27001, NIST, CIS benchmarks).

5.Project Management & Documentation:
Lead security upgrade projects (migrations, cloud deployments).
Prepare SOPs, risk assessments, and compliance reports.
Coordinate with vendors and stakeholders for cross-functional projects.

Qualifications & Requirements Mandatory:
– Education: Bachelor’s degree in any discipline.
– Certifications: o MCSA (Microsoft Certified Solutions Associate) or higher.
– CCNA/CCNP Security (Cisco Certified Network Professional).
– CISSP (Certified Information Systems Security Professional).
– FCNSA (Fortinet Certified Network Security Administrator).
– Experience: o 12+ years in IT security/infrastructure, with 8+ years in the UAE.
– Expertise in AD, Azure AD, SCCM, and ManageEngine products.
– Hands-on experience with Exchange Server 2016/2019/Online.
– Proven track record in third-party patch management.
– ITIL Framework: Certified (ITIL v3/v4 Foundation) or strong working knowledge. Preferred
– Project Management: PMP/PRINCE2 certification.
– Cloud Security: Microsoft AZ-500 (Azure Security Engineer).
– Scripting: PowerShell/Python for automation.