Cybersecurity Engineer – PAM, DLP & Email Security

Job Summary

We are seeking a hands-on Cybersecurity Engineer to deploy, manage, and optimise Privileged Access Management (PAM), Data Loss Prevention (DLP), and Email Security solutions. The role will focus on FortiPAM, FortiDLP, and FortiMail, protecting privileged accounts, sensitive data, and email infrastructure across hybrid environments.

Key Responsibilities

• Deploy, configure, and support FortiPAM, FortiDLP, and FortiMail solutions.
  
• Manage privileged accounts, credential vaulting, password rotation, RBAC, MFA, session recording, and just-in-time access.
  
• Configure DLP policies to protect sensitive data across endpoints, email, web, cloud applications, USB, print, and clipboard channels.
  
• Develop data classification, regex, fingerprinting, and exact-data-match rules; investigate and tune DLP alerts.
  
• Administer FortiMail for Microsoft 365 and hybrid Exchange environments.
  
• Configure and maintain SPF, DKIM, DMARC, anti-spam, anti-phishing, anti-malware, impersonation, and BEC protection policies.
  
• Troubleshoot authentication, mail flow, endpoint, policy, and integration issues.
  
• Integrate security platforms with AD/Entra ID, LDAP, RADIUS, SAML/SSO, SIEM, SOC, and Microsoft 365.
  
• Maintain security documentation, SOPs, audit logs, reports, and disaster-recovery procedures.
  
• Work closely with Network, Infrastructure, SOC, Compliance, and Application teams.
  

Requirements

• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field.
  
• Minimum 3–5 years of hands-on experience in enterprise cybersecurity operations.
  
• Experience with at least two of the following: FortiPAM/CyberArk/BeyondTrust/Delinea; FortiDLP/Microsoft Purview/Forcepoint/Symantec DLP; FortiMail/Proofpoint/Mimecast/Defender for Office 365.
  
• Strong knowledge of PAM, DLP, email security, Microsoft 365, hybrid Exchange, and identity integrations.
  
• Sound understanding of SPF, DKIM, DMARC, MTA-STS, SMTP, TLS, and email-routing concepts.
  
• Experience with SIEM monitoring, log analysis, incident investigation, and policy tuning.
  
• Knowledge of TCP/IP, DNS, firewalls, AD, Entra ID, LDAP, RADIUS, and SAML/SSO.
  
• PowerShell, Python, or Bash scripting experience is an advantage.
  

 
Preferred Certifications

·       Fortinet NSE 4/5/6/7 or Fortinet specialist certifications.

·       Security+, CySA+, CEH, CISSP, or CISM.

·       Exposure to ISO 27001, ISO 27701, healthcare, finance, telecom, or other regulated environments.