IT Security Engineer- KSA

About this opportunity

Job Summary We are looking for an experienced IT Engineer – Endpoint Management, PKI & Microsoft 365 E5 to manage and support enterprise endpoint management, Microsoft 365 E5 security capabilities, PKI/Certificate Authority infrastructure, and cryptographic services. The ideal candidate will have strong hands-on experience with Microsoft Intune/MDM, Microsoft 365 E5, Entra ID, Microsoft AD CS, Issuing CAs, digital certificates, and cryptography. Key Responsibilities 1- Endpoint Management – Intune & MDM Administer and support Microsoft Intune and MDM environments. Manage Windows, iOS/iPadOS, Android, and corporate endpoint devices. Configure device enrollment, compliance policies, configuration profiles, security policies, and application deployment. Support Windows Autopilot, MAM, and endpoint security policies. Integrate Intune with Microsoft Entra ID, Conditional Access, and Microsoft Defender. Troubleshoot device enrollment, compliance, policy, application, and authentication issues. Support certificate deployment to endpoints through Intune and enterprise PKI. 2- Microsoft 365 E5 Administer and support Microsoft 365 E5 security and endpoint capabilities. Manage and support Entra ID, Microsoft Defender, Intune, Conditional Access, and Microsoft Purview. Configure security and access policies based on users, devices, applications, and risk. Support Microsoft 365 security hardening and endpoint security baselines. Troubleshoot identity, authentication, device compliance, and security-policy issues. Support Microsoft 365 security assessments, compliance requirements, and security improvement initiatives. 3- PKI / Certificate Authority Administer enterprise PKI and Microsoft Active Directory Certificate Services (AD CS). Manage Root CA and Issuing/Subordinate CA environments. Create and manage certificate templates, enrollment policies, and auto-enrollment. Issue, renew, revoke, and troubleshoot digital certificates. Manage certificate lifecycle for users, endpoints, servers, applications, and network devices. Manage CRL/OCSP and troubleshoot certificate chain, trust, enrollment, and authentication issues. Integrate PKI with Intune, Active Directory, VPN, Wi-Fi, applications, and infrastructure. Support commercial CA platforms such as DigiCert where required. 4- Cryptography Strong understanding of enterprise cryptography and PKI concepts. Practical knowledge of symmetric/asymmetric encryption, public/private keys, digital signatures, hashing, and key management. Knowledge of RSA, ECC, AES, TLS/SSL, and related cryptographic technologies. Support secure key generation, storage, rotation, renewal, and revocation. Troubleshoot certificate, encryption, TLS, and authentication-related issues. Required Technical Skills Must Have: Microsoft Intune / MDM Microsoft 365 E5 Microsoft Entra ID Microsoft Defender & Conditional Access Microsoft AD CS / PKI Issuing CA / Subordinate CA Certificate lifecycle management Certificate templates & auto-enrollment CRL / OCSP Digital certificates & certificate-based authentication Cryptography – RSA, ECC, AES, TLS/SSL Active Directory & Group Policy PowerShell Windows endpoint administration Nice to Have: SCEP / PKCS Intune Certificate Connector / NDES Microsoft Purview Azure Key Vault HSM DigiCert Windows Autopilot VPN/Wi-Fi certificate authentication Certificate lifecycle automation ServiceNow / ITSM Experience & Qualifications Bachelor's degree in Computer Science, IT, Cybersecurity, Computer Engineering, or related field. 5+ years of overall IT infrastructure/security experience. 3+ years of hands-on PKI / Certificate Authority experience. 2+ years of hands-on Microsoft Intune / MDM experience. 2+ years of Microsoft 365 E5 experience, particularly with Intune, Entra ID, Defender, and Conditional Access. Strong practical knowledge of enterprise cryptography and digital certificates. Experience in enterprise, banking, government, or other regulated environments is preferred.