OM Bank - Junior Security Engineer – Identity, Endpoint & Data Protection

OM Bank
- Junior Security Engineer – Identity, Endpoint & Data Protection

Sep 17, 2026

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The Security Engineer (Identity, Endpoint & Data Protection) is responsible for implementing, maintaining, and continuously improving security controls across the Endpoint and User Ecosystem - including Identity and Access Management (IAM), Endpoint Protection, Data Loss Prevention (DLP), and Vulnerability Management.

Reporting to the Cloud Security Operations Lead, this role safeguards the organisation’s users, data, and endpoints through advanced configuration of Microsoft the Microsoft stack, and supports incident response, cyber defence, and risk remediation activities.

The role ensures the secure operation of Microsoft-based assets through proactive identity governance, endpoint compliance, and data protection. The engineer collaborates closely with Cyber Defence, Risk Management, and Dev Sec Ops  teams, providing technical expertise to implement risk-driven controls, automate policy enforcement, and improve visibility through Sentinel integration.

This position requires hands‑on proficiency with Microsoft E5 security tooling, strong analytical capability, and a passion for modern Zero Trust security operations.

• Manage and optimise areas such as Azure AD / Entra , Conditional Access, PIM, MFA, RBAC, and access package lifecycle governance.

• Administer endpoint protection tooling with compliance baselines, ensure encryption, patching, and secure configuration of all managed devices.
• Configure and maintain Microsoft Purview DLP, sensitivity labels, and information governance policies across M365 (Exchange, SharePoint, Teams, One Drive).

• Operate Microsoft Defender Vulnerability Management (DVM); track, prioritise, and remediate vulnerabilities in coordination with system owners.

• Build and deploy automated policies using Intune, Power Shell, and Graph API to enforce consistent security posture.

• Fine-tune Defender and SIEM detections to reduce false positives and improve coverage of endpoint, identity, and DLP telemetry.

• Generate dashboards and reports for device compliance, privileged access, DLP violations, and vulnerability metrics.
• Contribute to the ongoing maturity of the Endpoint and User security ecosystem and adoption of Zero Trust, "Security as Code," and automation.

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.

• Microsoft Certified:
  Security Operations Analyst Associate
• Microsoft Certified:
  Identity & Access Administrator Associate
• Microsoft Certified:
  Information Protection Administrator Associate
• CompTIA Security+ / CySA+ / AZ/MS-500, Hashi Corp Certified:
  Terraform Associate

• 2–4 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations.
• Proven experience managing Intune, Defender for Endpoint, and Entra l access policies.
• Hands‑on with Microsoft Purview DLP and sensitivity labelling across cloud services.
• Familiarity with Defender Vulnerability Management and integration into SOC workflows.
• Understanding of NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles.
• Experience with Terraform, and Dev Ops processes on Git Hub.
• Scripting languages such as Python
• Nice to have
  - Experience with Terraform, and Dev Ops processes on Git Hub.
• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.