Intermediate Identity and Endpoint Security Engineer Job Durban area,South Africa,IT/Tech

Job Description

IAM expertise: RBAC, access reviews, identity lifecycle, SSO, MFA, conditional access, PAM, Zero Trust
Endpoint security: EDR/XDR, MDM/UEM, hardening, patching, compliance, and incident response
Data protection: DLP, data classification, sensitivity labelling, retention policies, regulatory compliance
Email & collaboration security: phishing/BEC detection, malware analysis, URL protection, SharePoint/One Drive security
Automation: user/device provisioning & deprovisioning, security workflows, basic scripting (Power Shell/Python)
Incident response: ransomware, phishing, malware, identity threats, and data loss events
Governance & risk: security metrics, reporting, audits, risk assessments, and policy enforcement
Strong analytical skills, problem-solving, cross-team collaboration, and continuous security improvement

Responsibilities Identity Security

Implement and support identity and access management (IAM) processes, including:

Support And Maintain

Assist In The Administration Of

Privileged Access Management (PAM) solutions
Identity Governance processes
Perform periodic access reviews and identify excessive or inappropriate privileges. Support the enforcement of least privilege and Zero Trust principles. Collaborate with all teams to ensure correct access provisioning and governance.

Endpoint Security Operate And Maintain Endpoint Security Tools Including

Assist with endpoint hardening and configuration baselines.

Support patching and vulnerability remediation efforts in collaboration with infrastructure teams.

Ensure endpoint compliance with organizational security policies.

Assist in device onboarding, provisioning, and secure configuration.

Support incident response activities related to compromised or non-compliant devices.

Drive Automation Of

Data Protection

Implement and operate Data Loss Prevention (DLP) capabilities across endpoints, email, and collaboration platforms.

Assist In The Implementation And Management Of

Data classification and sensitivity labelling
Data protection policies across email, file storage, and endpoints
Data lifecycle and retention controls
Support enforcement of data protection policies aligned with business and regulatory requirements.

Email Security

Operate and maintain email security controls (e.g. Mimecast or similar platforms), including:

Monitor And Investigate Email Security Alerts, Including

Phishing attempts
Business Email Compromise (BEC)
Malicious attachments and links
Assist in tuning email security policies to improve detection and reduce false positives. Collaborate across the business to reduce risks associated with account compromise and email-based attack vectors.

Collaboration & Data Exposure Controls

Assist in securing collaboration platforms (e.g. SharePoint, One Drive, file shares), including:

External sharing controls
Data access restrictions
Misconfiguration and exposure risk identification
Investigate and respond to security incidents and escalations across identity, endpoint, data protection, and email domains, including ransomware, malware outbreaks, device compromise investigations, DLP events, and phishing attempts.

Governance, Metrics & Risk

Assist in tracking and reporting on key metrics such as:

MFA adoption
Endpoint compliance
Patch status
Access review completion
Data classification and labelling
Email security statistics
Document incidents, findings, and remediation actions
Support audit activities and provide evidence for identity and endpoint controls
Identify opportunities for automation and process improvements
Stay up to date with emerging threats and vulnerabilities related to identity and…