Lead Microsoft 365 Security Engineer — Entra ID & Defender XDR

Imbono; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

Imbono in the United Arab Emirates seeks a Senior Microsoft Security Engineer to own and operate the Microsoft 365 E5 security environment, including Entra ID, Intune, Defender XDR, Sentinel, and Purview. You will design, deploy, configure, and run identity, device management, and data protection across global sites.

The role aligns with ISO 27001:2022 ISMS and the NIST CSF 2.0 framework, with incident response leadership, cross‑tenant federation, and migration governance as core duties.

Qualifications

• Bachelor's degree or equivalent experience in CS or security.
• Certifications: SC-200, SC-300, AZ-500, SC-100, MS-102.
• 7–10 years in Microsoft 365 security engineering.
• Hands-on with Defender suite and Sentinel.
• Experience with E5 security stack and data protection.

Responsibilities

• Tenant build and configuration for M365 E5, including licensing and security baseline.
• Design and implement Entra ID, MFA, PIM, CA policies, and governance.
• Configure XTAP federation and cross-tenant sharing controls.
• Deploy and operate Intune across device estate and Autopilot.
• Operate Defender XDR, SIEM, data loss prevention, and Purview policies.
• Lead migration waves and coordinate with MSP for source-tenant actions.
• Manage SOC incident response, playbooks, and post-incident reviews.
• Govern platform health, licensing lifecycle, and ISO 27001 evidence.

Skills

Entra ID

Intune

Defender XDR

Microsoft Sentinel

Purview

PowerShell

Graph API

KQL

Zero Trust

Education

Bachelor's degree in Computer Science or Information Security

Tools

Microsoft Defender XDR

Microsoft Sentinel

Entra ID

Intune

Purview

PowerShell

Graph API

Job description

Imbono in the United Arab Emirates seeks a Senior Microsoft Security Engineer to own and operate the Microsoft 365 E5 security environment, including Entra ID, Intune, Defender XDR, Sentinel, and Purview. You will design, deploy, configure, and run identity, device management, and data protection across global sites.

The role aligns with ISO 27001:2022 ISMS and the NIST CSF 2.0 framework, with incident response leadership, cross‑tenant federation, and migration governance as core duties.