SENIOR INFRASTRUCTURE & IDENTITY ENGINEER

WE'RE HIRING | SENIOR INFRASTRUCTURE & IDENTITY ENGINEER Location: Rumaila Oilfield, Basra, Iraq Candidates: Iraqi nationals residing in Iraq Department: IT & Communications (IT&C) Experience: Minimum 10 years Work: Full-time | Onsite Reports to: Cyber and Risk Manager Alignment: Infrastructure / Back Office ABOUT THE ROLE We seek a senior, hands-on engineer to assess, remediate and support Microsoft infrastructure, hybrid identity, privileged access and endpoint security. This is an implementation and operations role, NOT a governance or audit-only position. The engineer must take findings through approved changes, testing and operational handover. KEY RESPONSIBILITIES • Review Active Directory forests, domains, trusts, domain controllers, DNS, replication, Group Policy, delegation, service accounts and authentication. • Assess Microsoft Entra ID, Entra Connect/Cloud Sync, Conditional Access, MFA, tenant roles, applications, service principals and guest access. • Prepare risk-ranked findings and implement fixes with test evidence, rollback plans and documentation. • Review PIM/PAM assignments, standing privileges and approvals; implement just-in-time access, eligible/time-bound roles, MFA, access reviews and emergency access. • Restructure privileged groups and local administrator rights across servers and endpoints; enforce least privilege without disrupting support. • Audit Intune and SCCM/Configuration Manager: enrollment, hybrid join, co-management, tenant attach, compliance, baselines, policies, applications, updates and RBAC. • Detect and fix duplicate, conflicting or obsolete endpoint policies through controlled pilots and phased rollout. • Harden Azure RBAC, Policy, subscriptions, Key Vault, managed identities, networking, monitoring, logging and Defender for Cloud configurations. • Improve vulnerability scanning coverage, triage, ownership, exceptions, remediation tracking, rescanning and closure validation. • Automate discovery, remediation and reporting using PowerShell and Microsoft Graph; maintain runbooks and handover documents. ESSENTIAL REQUIREMENTS Experience: 10+ years in Windows administration, infrastructure or identity engineering. Active Directory: Advanced AD DS, Group Policy, DNS/replication, trusts, delegation, privileged groups and troubleshooting. Microsoft Entra ID: Hybrid identity, synchronization, Conditional Access, MFA and role management. PIM/PAM: Proven implementation of eligible roles, JIT access, approvals, access reviews, privileged-access cleanup and administrative tiering. Endpoint Management: Hands-on Intune, SCCM, co-management, compliance and configuration remediation. Microsoft Azure: Azure RBAC, Policy, Key Vault, managed identities, logging, networking and Defender for Cloud. Security: Enterprise vulnerability management, remediation ownership, validation and reporting. Engineering: Advanced PowerShell; Windows Server/Windows 10/11; formal change control, root-cause analysis and documentation. Must be capable of directly implementing fixes, not just producing assessment reports. PREFERRED QUALIFICATIONS Microsoft certifications in Identity, Azure, Security, Windows Server Hybrid or Endpoint Administration. Microsoft Defender for Endpoint, Sentinel, Graph and KQL. Large-scale privileged-access remediation. Oil & Gas or critical-infrastructure experience. HOW TO APPLY job.cv.basra@gmail.com Email Subject: Senior Infrastructure & Identity Engineer Please include your updated CV, current location, relevant projects and professional certifications. محافظة البصرة