Intermediate Identity and Endpoint Security Engineer

Location: Durban, KwaZulu-Natal, South Africa; Hybrid

• IAM expertise: RBAC, access reviews, identity lifecycle, SSO, MFA, conditional access, PAM, Zero Trust 
• Endpoint security: EDR/XDR, MDM/UEM, hardening, patching, compliance, and incident response 
• Data protection: DLP, data classification, sensitivity labelling, retention policies, regulatory compliance 
• Email & collaboration security: phishing/BEC detection, malware analysis, URL protection, SharePoint/OneDrive security 
• Automation: user/device provisioning & deprovisioning, security workflows, basic scripting (PowerShell/Python) 
• Incident response: ransomware, phishing, malware, identity threats, and data loss events 
• Governance & risk: security metrics, reporting, audits, risk assessments, and policy enforcement 
• Strong analytical skills, problem-solving, cross-team collaboration, and continuous security improvement

Responsible for implementing and maintaining identity and endpoint security controls across the organization. Manages identity governance, access management, and endpoint protection to ensure secure, compliant operations.Works closely with infrastructure teams and technical leads to enforce security controls and resolve incidents. Takes a hands-on role in daily security operations, troubleshooting, and continuous improvement. Contributes to automation, process enhancements, and overall security posture improvements. Supports team members and promotes best practices to maintain strong identity hygiene and endpoint compliance.