Senior IT Security & Infrastructure Engineer

About the role

We are seeking a Senior IT Security & Infrastructure Engineer to protect and maintain our enterprise environment. The role covers identity, endpoints, servers, cloud, network, and security operations, ensuring compliance with Central Bank of Jordan cybersecurity requirements.

Key responsibilities

• Manage and maintain enterprise cybersecurity and IT security infrastructure.
• Administer Microsoft Azure and Microsoft Entra ID (Azure AD) – identity, access management, MFA, RBAC, Conditional Access, privileged access.
• Manage Active Directory, Group Policy, authentication services, and Windows Server environments.
• Implement endpoint security and device management using Microsoft Intune, Microsoft Defender for Endpoint/XDR, and ManageEngine Endpoint Central.
• Maintain Splunk for log collection, security monitoring, dashboards, detection, and incident investigation.
• Monitor alerts, conduct threat hunting, investigate incidents, and coordinate response.
• Perform vulnerability assessments, remediation, and patch management for Windows servers and endpoints.
• Support network security technologies including firewalls, VPNs, NPS, and 802.1X.
• Collaborate with NOC, Infrastructure, and IT teams to resolve security and operational incidents.
• Support security audits, compliance activities, and continuous improvement of security posture.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• Minimum 5 years of hands‑on experience in IT security, cybersecurity engineering or security infrastructure.
• Strong experience with Microsoft Azure and Microsoft Entra ID.
• Proven expertise in Active Directory, Group Policy, Windows Server and endpoint security.
• Experience in regulated or enterprise environments preferred.

Required skills

• Microsoft Azure
• Microsoft Entra ID (Azure AD)
• Active Directory & Group Policy
• Windows Server
• Microsoft Intune
• Microsoft Defender for Endpoint / XDR
• ManageEngine Endpoint Central
• Splunk SIEM
• Trend Micro Vision One / XDR
• Firewalls, VPNs, NPS, 802.1X
• BitLocker and remote administration