Associate Manager, D&T, Cybersecurity Engineer

and email security to join the CyberSecurity Engineering team.You'll play a crucial role in designing, implementing, and managing security controls to protect our organization against email-based threats, phishing attacks, and other collaboration security risks. You will also contribute to the continuous enhancement of our security capabilities across IT, OT, and R&D environments.

Your key responsibilities :

• Enhance Identity Security by continuously improving Microsoft Entra ID/Azure AD Conditional Access policies to support Zero Trust principles, including phishing-resistant MFA and passwordless authentication.

• Strengthen Entra ID Components such as Enterprise Applications and App Registrations through improved access controls and security configurations.

• Advance Email Security using Microsoft Defender for Office 365 and ProofPoint by enforcing and refining policies to mitigate phishing and other advanced email-based threats.

• Improve Email Protocol Security by enhancing SPF, DKIM, and DMARC configurations for all company domains to reduce spoofing and domain misuse.

• Develop and Improve PKI Architecture to support secure identity, authentication, and encryption across enterprise systems, ensuring alignment with X.509, RFC 5280, and internal governance standards.

• Automate Certificate Lifecycle Management by designing and implementing PKI automation solutions (including ACME-based processes) for efficient certificate issuance, renewal, and revocation, in collaboration with internal teams

You bring:

• 10+ years of hands-on experience with email security gateways like Proofpoint or Microsoft Defender for O36
• Strong experience in PKI with OCSP and CRL (related to certificates)
• Strong knowledge of email security threats, phishing techniques, and mitigation strategies and conditional Access policies, MFA with EntraID
• Experience designing PKI solutions for hybrid and multi-cloud environments
• Ability to conduct security assessments and provide recommendations based on industry standards
• Experience with Microsoft Azure cloud services and security frameworks

We Bring:

• A team of diverse employees who aren't afraid to think outside of the box.
• A truly global and collaborative team that cares about the experience of our employees.
• The encouragement you need to develop and achieve personal growth.
• A role that is crucial on projects and allows you to build your brand.
• A caring and supportive environment where you're empowered to grow and share your ideas.

The application process:

Interested in this position Please apply on-line by uploading your resume in English via our internal career portal. For further information about the position, please contact Nisha Tiwari ().

Inclusion, belonging and equal opportunity statement:

At dsm-firmenich, we believe being a force for good starts with the way we treat each other. When people feel supported, included, and free to be themselves, they do their best work - and that's exactly the kind of culture we're building. A place where opportunity is truly equal, authenticity is celebrated, and everyone has the chance to grow, contribute, and feel they belong.
We're proud to be an equal opportunity employer, and we're serious about making our hiring process as fair and inclusive as possible. From inclusive language and diverse interview panels to thoughtful sourcing, we're committed to reflecting the world we serve.

We welcome candidates from all backgrounds - no matter your gender, ethnicity, sexual orientation, or anything else that makes you, you.

And if you have a disability or need any support through the application process, we're here to help - just let us know what you need, and we'll do everything we can to make it work.

Agency statement:

We're managing this search directly at dsm-firmenich. If you're applying as an individual, we'd love to hear from you. We're not accepting agency submissions or proposals involving fees or commissions for this role.