Senior Infrastructure & Identity Engineer — البصرة

الراتب يُحدد أثناء المقابلة

البصرة

الشروط المطلوبة

Minimum 10 years experience in Windows administration, infrastructure or identity engineering

نوع الدوام

دوام كامل

WE'RE HIRING | SENIOR INFRASTRUCTURE & IDENTITY ENGINEER

📍 Location: Rumaila Oilfield, Basra, Iraq

🇮🇶 Candidates: Iraqi nationals residing in Iraq

🏢 Department: IT & Communications (IT&C)

💼 Experience: Minimum 10 years

🏗 Work: Full-time | Onsite

👤 Reports to: Cyber and Risk Manager

🔹 Alignment: Infrastructure / Back Office

🔹 ABOUT THE ROLE

We seek a senior, hands-on engineer to assess, remediate and support Microsoft infrastructure, hybrid identity, privileged access and endpoint security.

This is an implementation and operations role, NOT a governance or audit-only position. The engineer must take findings through approved changes, testing and operational handover.

🔹 KEY RESPONSIBILITIES

• Review Active Directory forests, domains, trusts, domain controllers, DNS, replication, Group Policy, delegation, service accounts and authentication.

• Assess Microsoft Entra ID, Entra Connect/Cloud Sync, Conditional Access, MFA, tenant roles, applications, service principals and guest access.

• Prepare risk-ranked findings and implement fixes with test evidence, rollback plans and documentation.

• Review PIM/PAM assignments, standing privileges and approvals; implement just-in-time access, eligible/time-bound roles, MFA, access reviews and emergency access.

• Restructure privileged groups and local administrator rights across servers and endpoints; enforce least privilege without disrupting support.

• Audit Intune and SCCM/Configuration Manager: enrollment, hybrid join, co-management, tenant attach, compliance, baselines, policies, applications, updates and RBAC.

• Detect and fix duplicate, conflicting or obsolete endpoint policies through controlled pilots and phased rollout.

• Harden Azure RBAC, Policy, subscriptions, Key Vault, managed identities, networking, monitoring, logging and Defender for Cloud configurations.

• Improve vulnerability scanning coverage, triage, ownership, exceptions, remediation tracking, rescanning and closure validation.

• Automate discovery, remediation and reporting using PowerShell and Microsoft Graph; maintain runbooks and handover documents.

🔹 ESSENTIAL REQUIREMENTS

✅ Experience: 10+ years in Windows administration, infrastructure or identity engineering.

✅ Active Directory: Advanced AD DS, Group Policy, DNS/replication, trusts, delegation, privileged groups and troubleshooting.

✅ Microsoft Entra ID: Hybrid identity, synchronization, Conditional Access, MFA and role management.

✅ PIM/PAM: Proven implementation of eligible roles, JIT access, approvals, access reviews, privileged-access cleanup and administrative tiering.

✅ Endpoint Management: Hands-on Intune, SCCM, co-management, compliance and configuration remediation.

✅ Microsoft Azure: Azure RBAC, Policy, Key Vault, managed identities, logging, networking and Defender for Cloud.

✅ Security: Enterprise vulnerability management, remediation ownership, validation and reporting.

✅ Engineering: Advanced PowerShell; Windows Server/Windows 10/11; formal change control, root-cause analysis and documentation.

✅ Must be capable of directly implementing fixes, not just producing assessment reports.

🔹 PREFERRED QUALIFICATIONS

⭐ Microsoft certifications in Identity, Azure, Security, Windows Server Hybrid or Endpoint Administration.

⭐ Microsoft Defender for Endpoint, Sentinel, Graph and KQL.

⭐ Large-scale privileged-access remediation.

⭐ Oil & Gas or critical-infrastructure experience.

📩 HOW TO APPLY

📧 (البريد مخفي — اضغط لإظهاره)

Email Subject: Senior Infrastructure & Identity Engineer

Please include your updated CV, current location, relevant projects and professional certifications.