{"id":4159754,"url":"https://alion.io/job/otelier-corporate-it-security-engineer","title":"Corporate IT Security Engineer","company":{"id":2820442,"name":"Otelier","domain":"otelier.io","url":"https://alion.io/company/otelier","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"IAM","optional":true},{"name":"Microsoft Defender","optional":true}],"status":"live","first_seen_at":"2026-11-12T05:44:53Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T10:06:55Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nKey Responsibilities\nIdentity, Access & Endpoint Security\nAdminister Microsoft Entra ID: users, groups, role-based access, Conditional Access, MFA, SSO application integrations, and identity lifecycle. \nAdminister and secure Microsoft 365 and Azure tenant configurations, including role assignments, security baselines, and audit logging. \nManage macOS devices in Jamf Pro: enrollment, configuration profiles, OS and application patching, disk encryption, and compliance reporting. \nImplement and maintain least-privilege access, including dedicated administrative accounts for privileged roles across Microsoft and key SaaS applications. \nMonitor identity and endpoint security alerts, triage and investigate, and escalate incidents in line with the incident response plan. \nIT Operations & Automation\nProvide helpdesk support for employee IT needs, handling requests and troubleshooting day to day, and serve as the escalation point for corporate IT issues alongside the IT Manager. \nOwn joiner, mover, and leaver (onboarding and offboarding) processes and automate provisioning and deprovisioning so access changes are timely, consistent, and auditable. \nBuild and maintain scripts (PowerShell / Microsoft Graph, Bash/zsh, or Python) and low-code/no-code workflows (Power Automate, Logic Apps, or similar) to eliminate repetitive manual IT and compliance tasks. \nSupport configuration and integration of business applications (e.g., Microsoft 365, Salesforce, Atlassian, and our finance systems). \nDocument IT processes, standards, and runbooks so they can be followed and audited by others. \nCoordinate with third-party IT service providers and vendors to resolve issues on time. \nSecurity, Risk & Compliance\nOwn the day-to-day operation of technical controls for SOC 2 and GDPR, ensuring controls are designed, operating, and evidenced throughout the audit period. \nMaintain our GRC platform: keep system integrations healthy, resolve failing control tests, and automate evidence collection wherever possible. \nCoordinate audits, assessments, and auditor requests in partnership with the IT Manager. \nRun periodic user access reviews, vendor security reviews, and security control reviews; partner with DevOps on access reviews for cloud infrastructure. \nTrack vulnerabilities, penetration-testing findings, and security issues through resolution with IT, DevOps, and development teams. \nMaintain security policies, the risk register, and supporting compliance documentation. \nSupport security awareness training and phishing simulations, and help employees follow security best practices. \nRequirements\nWhat We're Looking For\nRequired\n3-5 years of experience in IT systems administration, security engineering, or a related field, including hands-on work operating security or compliance controls. \nHands-on administration of Microsoft Entra ID and Microsoft 365, including Conditional Access, MFA, role-based access, and SSO application integration. \nWorking experience with Microsoft Azure administration and security (e.g., RBAC, Azure Policy, resource and identity security). \nExperience managing macOS devices with Jamf Pro. \nDemonstrated experience automating IT processes using scripting (PowerShell, Bash/zsh, or Python) and low-code/no-code tools (Power Automate, Logic Apps, or similar). You should be able to walk us through workflows you have built and the manual effort they removed. \nPractical experience supporting SOC 2 (Type II preferred), GDPR, or similar frameworks, including evidence collection and remediation. \nComfortable working independently, managing competing priorities across IT operations and security work. \nStrong communication skills - able to translate technical and compliance requirements for non-technical stakeholders. \nBachelor's degree in Information Technology, Computer Science, or a related field (or equivalent experience). \nNice to Have\nExperience with a GRC/compliance automation platform such as Drata or Vanta. \nExperience with Microsoft Intune and Microsoft Defender for Endpoint or Defender XDR. \nFamiliarity with AWS identity and access management (IAM) concepts. \nRelevant certifications, such as Microsoft SC-300 (Identity and Access Administrator), SC-500 (Cloud and AI Security Engineer) or its predecessor AZ-500, Jamf Certified Tech or Admin, or CompTIA Security+.","description_format":"text","description_chars":4340,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hotels & Resorts","Travel Technology"],"lifecycle":[{"event":"open","at":"2026-11-12T11:59:44Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":56,"reasons":["conf:2","win:early"],"computed_at":"2026-11-13T12:07:43Z"},"pay":null,"html_url":"https://alion.io/job/otelier-corporate-it-security-engineer","json_url":"https://alion.io/job/otelier-corporate-it-security-engineer.json","meta":{"generated_at":"2026-11-13T12:07:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24401,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2820442},"rest":"https://alion.io/mcp/rest/get_company?id=2820442"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fotelier-corporate-it-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fotelier-corporate-it-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fotelier-corporate-it-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/otelier-corporate-it-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fotelier-corporate-it-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4159754}},{"tool":"search_jobs","arguments":{"company":"otelier.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4159754},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}