Cybersecurity Engineer (Microsoft 365, Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID (Azure AD) (CPT Onsite) at Datafin Recruitment

ENVIRONMENT:

• SUPPORT the Cybersecurity strategy of a dynamic Internet Service & Network Specialist seeking your technical expertise as a Cybersecurity Engineer where you will deploy and maintain security solutions, investigate security events, manage vulnerabilities, and ensure compliance with security standards and regulatory requirements.
• You will further be responsible for the implementation, operation, monitoring, and continuous improvement of Cybersecurity technologies and controls that safeguard the organization's information assets.
• The role focuses on securing network, endpoint, cloud, and application environments through effective threat detection, vulnerability management, incident response, and security engineering practices.
• Working closely with IT and business stakeholders, you will help ensure that security is embedded into operational processes and technology initiatives while supporting the organization's resilience against cyber threats.
• The successful candidate must have Matric/Grade 12, a Degree/Diploma in IT with 3-5 years' relevant work experience including hands-on experience administering and securing Microsoft Windows Server environments.
• Your tech tools should include Microsoft 365, Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD).

DUTIES:

Security Engineering & Implementation –

• Deploy, configure, and maintain security technologies across network, endpoint, cloud, and application environments.
• Administer security tools such as Firewalls, IDS/IPS, EDR/XDR, SIEM, IAM, and DLP solutions.
• Perform system hardening in line with security standards and best practices.
• Ensure security controls remain operational, effective, and appropriately configured.

Security Monitoring & Threat Management –

• Monitor security environments for suspicious activity and potential threats.
• Analyse logs, alerts, and events using SIEM and other monitoring tools.

​​​​​​​Vulnerability & Risk Management –

• Conduct vulnerability scans and assessments.
• Assist with penetration testing activities and remediation planning.
• Track vulnerabilities through to closure.
• Support patch management and system remediation efforts.

​​​​​​​Incident Response & Recovery –

• Participate in incident investigation, containment, eradication, and recovery activities.
• Execute incident response procedures and playbooks.
• Assist in root cause analysis and post-incident reviews.
• Maintain incident documentation and evidence.

​​​​​​​Compliance & Governance –

• Support compliance initiatives relating to ISO 27001, NIST, CIS Controls, POPIA, and other applicable frameworks.
• Assist with audits and compliance assessments.
• Maintain security documentation, standards, procedures, and records.
• Monitor adherence to security policies and standards.

​​​​​​​Stakeholder Engagement –

• Work closely with IT Operations, Infrastructure, Cloud, and Application teams.
• Communicate technical findings and recommendations effectively.
• Provide security guidance and awareness support to internal stakeholders.
• Contribute to knowledge sharing and continuous improvement initiatives.

REQUIREMENTS:

Qualifications –

• Matric Grade 12 (Compulsory).
• Degree or Diploma in Information Technology.

​​​​​​​Experience/Skills –

• 3-5 Years' experience in IT Infrastructure, Systems Administration, or Cybersecurity.
• Hands-on experience administering and securing Microsoft Windows Server environments.
• Experience with Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD).
• Experience with Microsoft 365 administration and security technologies.
• Exposure to security monitoring, incident response, and vulnerability management.
• Experience implementing and supporting security solutions such as firewalls, EDR/XDR, SIEM, and IAM.
• Working knowledge of Microsoft Azure and Cloud Security principles.
• Experience with system hardening, patch management, and security best practices.
• Exposure to security frameworks and compliance requirements such as ISO 27001, NIST, CIS Controls, and POPIA.
• Valid Driver’s License and willingness to travel to client sites or project locations as required.

Desired – Not Mandatory Certifications:

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Information Security Administrator Associate (SC 401)
• MCSE: Core Infrastructure/ MCSA Windows Server 2016
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Endpoint Administrator Associate
• Fortinet NSE4
• CC Cybersecurity
• CompTIA Security+
• CySA (CompTIA Cybersecurity Analyst)

ATTRIBUTES:

• Problem Solving & Critical Thinking.
• Team Collaboration.
• Communication & Reporting.
• Adaptability & Continuous Learning.
• Stakeholder Management.
• Project Coordination.
• Technical Documentation.
• Risk-Based Decision Making.