Cybersecurity Engineer – PAM, DLP & Email Security

We are seeking a hands-on Cybersecurity Engineer to deploy manage and optimise Privileged Access Management (PAM) Data Loss Prevention (DLP) and Email Security solutions. The role will focus on FortiPAM FortiDLP and FortiMail protecting privileged accounts sensitive data and email infrastructure across hybrid environments.

• Deploy configure and support FortiPAM FortiDLP and FortiMail solutions.
  
• Manage privileged accounts credential vaulting password rotation RBAC MFA session recording and just-in-time access.
  
• Configure DLP policies to protect sensitive data across endpoints email web cloud applications USB print and clipboard channels.
  
• Develop data classification regex fingerprinting and exact-data-match rules; investigate and tune DLP alerts.
  
• Administer FortiMail for Microsoft 365 and hybrid Exchange environments.
  
• Configure and maintain SPF DKIM DMARC anti-spam anti-phishing anti-malware impersonation and BEC protection policies.
  
• Troubleshoot authentication mail flow endpoint policy and integration issues.
  
• Integrate security platforms with AD/Entra ID LDAP RADIUS SAML/SSO SIEM SOC and Microsoft 365.
  
• Maintain security documentation SOPs audit logs reports and disaster-recovery procedures.
  
• Work closely with Network Infrastructure SOC Compliance and Application teams.
  

• Bachelors degree in IT Cybersecurity Computer Science or related field.
  
• Minimum 35 years of hands-on experience in enterprise cybersecurity operations.
  
• Experience with at least two of the following: FortiPAM/CyberArk/BeyondTrust/Delinea; FortiDLP/Microsoft Purview/Forcepoint/Symantec DLP; FortiMail/Proofpoint/Mimecast/Defender for Office 365.
  
• Strong knowledge of PAM DLP email security Microsoft 365 hybrid Exchange and identity integrations.
  
• Sound understanding of SPF DKIM DMARC MTA-STS SMTP TLS and email-routing concepts.
  
• Experience with SIEM monitoring log analysis incident investigation and policy tuning.
  
• Knowledge of TCP/IP DNS firewalls AD Entra ID LDAP RADIUS and SAML/SSO.
  
• PowerShell Python or Bash scripting experience is an advantage.
  

Preferred Certifications

Fortinet NSE 4/5/6/7 or Fortinet specialist certifications.

Security CySA CEH CISSP or CISM.

Exposure to ISO 27001 ISO 27701 healthcare finance telecom or other regulated environments.