Hybrid Security Engineer

at Codec Ireland

• Job title: Security Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Azure, Vault
• Location requirements: Hybrid, Belfast, United Kingdom

About the role

• Microsoft Security Engineer focused on implementing and supporting cloud security solutions in Microsoft ecosystems. Responsible for managing security technologies including Microsoft Defender and Purview.

Responsibilities

• Deploy, configure, and maintain core Microsoft security technologies, including Azure Networking Security components and Entra ID services.
• Execute the onboarding and fine-tuning of the Microsoft Defender suite across customer environments.
• Implement and manage Microsoft Sentinel for security information and event management (SIEM).
• Implement and configure Microsoft Purview capabilities, including Data Loss Prevention (DLP) policies and records management features.
• Define and apply data classification schemes and retention policies across various data sources using Purview tools.
• Implement and manage Microsoft Intune policies for endpoint security, compliance, and device configuration.
• Configure advanced Identity and Access Management (IAM) solutions within Entra ID.
• Produce clear, detailed, and up-to-date technical runbooks, configuration guides, and "as-built" documentation for all implemented security and compliance solutions.

Requirements

• Deep, hands-on experience with the deployment and configuration of Microsoft Azure security services (Azure Policy, Network Security, Key Vault) and E5 Security.
• Expert proficiency in configuring and managing Entra ID (formerly Azure AD), including advanced features like Conditional Access Policies, PIM, MFA, and SSO integrations.
• Proven implementation experience with the Microsoft Defender Suite and Microsoft Sentinel.
• Practical hands-on experience implementing Microsoft Purview, specifically configuring DLP policies, sensitivity labeling, and retention labels.
• Strong practical knowledge of managing security controls for Windows and mobile endpoints using Microsoft Intune.
• Excellent ability to follow detailed technical implementation plans and execute tasks efficiently.
• Strong troubleshooting and analytical skills to diagnose and resolve complex technical security and compliance issues.
• Meticulous attention to detail in technical configuration and "as-built" documentation.
• Current Microsoft certifications such as AZ-500 (Azure Security Engineer Associate), SC-200 (Microsoft Security Operations Analyst), or SC-400 (Microsoft Information Protection Administrator).
• Practical experience applying security and compliance frameworks such as ISO 27001 or NIST during implementation.
• Familiarity with automation and scripting tools (e.g., PowerShell, Azure CLI, ARM/Bicep templates) to streamline deployments.