Senior Microsoft Security Engineer

Codec; Ireland; On-site; EUR 110,000 - 150,000; Full time

Job summary

Codec in Dublin seeks a Senior Microsoft Security Engineer to implement and support cloud security, data governance, and identity management across Azure, Entra ID, Defender, and Purview. This hands-on role emphasizes turning designs into secure customer environments with strong governance and compliance focus.

You will deploy and tune Defender suites, configure Purview data policies, and manage Intune endpoints, ensuring robust security posture and operational readiness.

Qualifications

• 10+ years in identity and security technologies.
• Hands-on with Azure security services and E5 Security.
• Expert in Entra ID, CA, PIM, MFA, and SSO integrations.
• Experience with Defender Suite and Sentinel deployment.
• Experience configuring Purview DLP, sensitivity labeling, and retention.
• Knowledge of Intune for endpoint security and policy enforcement.

Responsibilities

• Deploy, configure, and maintain Azure Security technologies (Firewall, NSGs, WAF) and Entra ID services.
• Onboard and tune Defender suite across customer environments.
• Implement and manage Microsoft Sentinel SIEM with connectors, playbooks, and rules.
• Configure Purview governance, including DLP, labeling, and retention across data sources.
• Implement Intune policies for endpoint security and IAM configurations in Entra ID.
• Produce runbooks and documentation for security and compliance implementations.

Skills

Cloud security

Microsoft Azure security

Entra ID / Azure AD

Defender suite configuration

Sentinel SIEM

Purview governance

Intune endpoint security

IAM governance

Policy & compliance

Tools

Azure Policy

Azure Firewall

NSGs

Azure WAF

Entra ID

Defender for Endpoint

Defender for Cloud

Defender for Office 365

Sentinel

Purview

Intune

Key Vault

Entra Private Access

Job description

Senior Microsoft Security Engineer

Department: Azure

Employment Type: Full Time

Location: Dublin

Description

We are seeking a highly skilled and results-driven senior Microsoft Security Engineer to join our technical delivery team. The ideal candidate will be a hands‑on subject matter expert in Microsoft’s security ecosystem, with a strong focus on implementing, configuring, and supporting cloud security and data governance solutions within Azure, Entra, the Microsoft Defender suite, and Microsoft Purview. This role is primarily focused on technical execution – turning architectural designs into secure, compliant, and operational customer environments.

Key Responsibilities

Implementation & Configuration

• Deploy, configure, and maintain core Microsoft security technologies, including Azure Networking Security components (Azure Firewall, NSGs, Azure WAF) and Entra ID services (Conditional Access, PIM, Entra Private Access).
• Execute the onboarding and fine‑tuning of the Microsoft Defender suite (e.g., Defender for Endpoint, Defender for Cloud, Defender for Office 365) across customer environments.
• Implement and manage Microsoft Sentinel for security information and event management (SIEM), including connector deployment, playbook automation, and custom rule creation.

Data Governance & Compliance

• Implement and configure Microsoft Purview capabilities, including Data Loss Prevention (DLP) policies, Information Protection (sensitivity labels, encryption), and records management features.
• Configure eDiscovery, communication compliance, and audit log settings within Purview to meet regulatory and data protection requirements (e.g., GDPR, ISO 27001).
• Define and apply data classification schemes and retention policies across various data sources using Purview tools.

Endpoint & Identity Management

• Implement and manage Microsoft Intune policies for endpoint security, compliance, and device configuration.
• Configure advanced Identity and Access Management (IAM) solutions within Entra ID, focusing on least privilege principles and identity governance.

Operational Support & Documentation

• Perform security hardening and ensure operational compliance through the implementation of Azure Policy and resource locks.
• Produce clear, detailed, and up-to-date technical runbooks, configuration guides, and "as-built" documentation for all implemented security and compliance solutions.

Skills, Knowledge and Expertise

Technical Execution Expertise

• 10+ years experience in identity and security technologies.
• Deep, hands‑on experience with the deployment and configuration of Microsoft Azure security services (Azure Policy, Network Security, Key Vault) and E5 Security.
• Expert proficiency in configuring and managing Entra ID (formerly Azure AD), including advanced features like Conditional Access Policies, PIM, MFA, and SSO integrations.
• Proven implementation experience with the Microsoft Defender Suite and Microsoft Sentinel.
• Practical hands‑on experience implementing Microsoft Purview, specifically configuring DLP policies, sensitivity labeling, and retention labels.
• Strong practical knowledge of managing security controls for Windows and mobile endpoints using Microsoft Intune.

Soft Skills & Qualifications

• Excellent ability to follow detailed technical implementation plans and execute tasks efficiently.
• Strong troubleshooting and analytical skills to diagnose and resolve complex technical security and compliance issues.
• Meticulous attention to detail in technical configuration and "as-built" documentation.

Desirable Attributes

• Current Microsoft certifications such as AZ-500 (Azure Security Engineer Associate), SC-200 (Microsoft Security Operations Analyst), or SC-400 (Microsoft Information Protection Administrator).
• Practical experience applying security and compliance frameworks such as ISO 27001 or NIST during implementation.
• Familiarity with automation and scripting tools (e.g., PowerShell, Azure CLI, ARM/Bicep templates) to streamline deployments.