Cybersecurity Engineer – FortiPAM / FortiDLP / FortiMail

Cybersecurity Engineer – FortiPAM / FortiDLP / FortiMail

Location: Remote / Dubai for candidates already based there

Contract: 6 months, extendable

Start: ASAP

Interviews: This week

Overview

We are looking for an experienced Cybersecurity Engineer to join an initial 6-month extendable contract, supporting the design, deployment and management of Privileged Access Management, Data Loss Prevention and Email Security infrastructure.

This is a hands-on technical role covering PAM, DLP and email security, with a strong focus on the Fortinet security ecosystem including FortiPAM, FortiDLP and FortiMail.

The successful candidate will work closely with network, infrastructure, SOC and compliance teams across security deployment, policy engineering, troubleshooting and continuous security improvement.

Responsibilities

Privileged Access Management

• Deploy, configure and administer PAM solutions, ideally FortiPAM.
• Manage privileged and service accounts, credential vaulting and password rotation.
• Configure RDP, SSH, HTTPS and database privileged access.
• Manage session recording, monitoring and Just-in-Time access.
• Implement approval workflows, RBAC and least-privilege controls.
• Integrate PAM with AD, Entra ID, LDAP, RADIUS and SAML/SSO.
• Troubleshoot authentication and privileged-session issues.

Data Loss Prevention

• Design, implement and tune DLP policies, ideally using FortiDLP.
• Develop data-classification and detection rules using regex, fingerprinting and exact data matching.
• Protect sensitive information across endpoint, email, web and removable-media channels.
• Investigate DLP alerts and reduce false positives through policy tuning.
• Support audit and compliance reporting.

Email Security

• Administer email security gateways, ideally FortiMail, across Microsoft 365 and hybrid Exchange environments.
• Configure and manage SPF, DKIM, DMARC and associated email-security controls.
• Tune anti-spam, anti-phishing, malware, impersonation and BEC protections.
• Troubleshoot mail-flow, routing, queues and NDR issues.
• Support Microsoft Graph integrations, quarantine management and mailbox remediation.
• Maintain multi-tenant email-security policies and configurations.

Required Skills

• 3–5+ years of hands-on enterprise cybersecurity experience.
• Demonstrable experience with at least two of the following areas:
• PAM: FortiPAM, CyberArk, BeyondTrust or Delinea.
• DLP: FortiDLP, Forcepoint, Symantec DLP or Microsoft Purview.
• Email Security: FortiMail, Proofpoint, Mimecast or Microsoft Defender for Office 365.
• Strong knowledge of SPF, DKIM, DMARC and email-security concepts.
• Active Directory and Entra ID experience.
• LDAP, RADIUS and SAML/SSO integration knowledge.
• Microsoft 365 / hybrid Exchange experience.
• Understanding of credential vaulting, JIT access, session recording and RBAC.
• DLP policy engineering and data-classification experience.
• Strong networking fundamentals and security troubleshooting skills.

Nice to Have

• Fortinet NSE or relevant Fortinet specialist certifications.
• CISSP, CISM, Security+, CySA+ or CEH.
• PowerShell, Python or Bash scripting.
• ISO 27001 / 27701 / 22301 exposure.
• Healthcare, finance, telecom or another regulated-industry background.
• Microsoft Defender for Endpoint, FortiGate or FortiManager experience.
• Multi-tenant MSSP/shared-services experience.
• Qualys, Nessus or Aruba ClearPass exposure.

Why Apply?

This is a hands-on security contract offering exposure across PAM, DLP and email security within a broad enterprise security environment. The initial contract is six months with the potential to extend.

The role can be performed remotely, or from Dubai for candidates already based there.

How to Apply

Interviews are taking place this week with an ASAP start.

Send your CV to james.bundock@tanint.com .