Bilingual IT & Microsoft Security Administrator

Northware SA de CV; México; On-site; MXN 600,000 - 900,000; Full time

Job summary

Northware SA de CV is seeking an experienced IT professional to administer and secure its Microsoft 365 environment across Exchange Online, Teams, SharePoint Online, and OneDrive for Business. You will implement Defender XDR, monitor security, and support cloud initiatives within a fast-paced corporate IT setting.

You will also manage identity and access controls, leverage Intune for device management, and contribute to risk assessments and compliance activities.

Qualifications

• 2+ years hands-on experience administering Microsoft 365 environments.
• Experience with cybersecurity and endpoint security administration.
• Familiarity with enterprise network and security infrastructure.

Responsibilities

• Administer and maintain Microsoft 365 services including Exchange Online, Teams, SharePoint Online, and OneDrive for Business.
• Configure and support Microsoft 365 security and compliance features.
• Monitor tenant health, service availability, and operational performance.
• Maintain Microsoft 365 administration policies and standards.
• Assist with cloud migrations and platform enhancements.
• Support licensing optimization and auditing.

Skills

Microsoft 365 Administration

Defender XDR

Endpoint security

PowerShell

Intune

Entra ID / Azure AD

Zero Trust concepts

Threat hunting

Security monitoring

Identity & access management

Education

Bachelor's degree in Computer Science or IT

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

Microsoft Sentinel

Entra ID / Azure AD

Job description

• Administer and maintain Microsoft 365 services including:
  • Exchange Online
  • Microsoft Teams
  • SharePoint Online
  • OneDrive for Business
  • Microsoft Defender Suite
  • Entra ID (Azure Active Directory)
• Manage user accounts, licensing, mailboxes, groups, distribution lists, shared mailboxes, and resource accounts.
• Configure and support Microsoft 365 security and compliance features.
• Monitor tenant health, service availability, and operational performance.
• Maintain Microsoft 365 administration policies and standards.
• Support Microsoft cloud migrations and platform enhancements.
• Assist with Microsoft licensing optimization and auditing.

Microsoft Security Operations

• Administer and maintain:
  • Microsoft Defender for Endpoint
  • Microsoft Defender for Office 365
  • Microsoft Defender for Identity
  • Microsoft Defender for Cloud Apps
• Monitor security dashboards and conduct threat investigations.
• Analyze and triage alerts, incidents, and vulnerability findings.
• Coordinate cybersecurity incidents with internal stakeholders and Managed Detection and Response (MDR) providers.
• Perform threat hunting and forensic investigations.
• Implement security recommendations and hardening practices.
• Evaluate and remediate vulnerabilities identified through vulnerability management tools.
• Develop and maintain endpoint protection policies.
• Administer Microsoft Sentinel security operations platform.
• Configure and manage:
  • Data connectors
  • Analytics rules
  • Automation rules
  • Workbooks
  • Playbooks
  • Watchlists
  • Incident management processes
• Monitor security events and correlated alerts.
• Threat hunting
• Compliance reporting
• Security analytics
• Optimize log ingestion and retention strategies.
• Create executive and technical reporting dashboards.
• Support regulatory and compliance audit requirements.

Endpoint Management & Intune Administration

• Manage Microsoft Intune and endpoint management solutions.
• Configure and administer:
  • Device enrollment
  • Compliance policies
  • Configuration profiles
  • Security baselines
  • Conditional Access integrations
  • Mobile Device Management (MDM)
  • Mobile Application Management (MAM)
• Deploy and maintain Windows, macOS, iOS, and Android devices.
• Package, test, deploy, and update enterprise applications.
• Oversee endpoint patch management and compliance.
• Monitor endpoint health and performance.
• Maintain secure endpoint configurations across the enterprise.

Identity & Access Management

• Manage:
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Conditional Access Policies
  • Identity Protection
  • Privileged Identity Management (PIM)
  • Role-Based Access Control (RBAC)
• Review access privileges and conduct periodic access audits.
• Support onboarding, transfers, and offboarding processes.
• Implement Zero Trust security principles.
• Enforce least-privilege access standards.
• Participate in identity governance initiatives.

Network & Security Infrastructure Administration

Fortinet Security Platforms

• Configure, manage, and maintain:
  • Firewalls
  • Manager
  • Analyzer
  • Authenticator
  • EMS
  • VPN
• Manage firewall policies, routing, VPNs, SD-WAN, NAT, and security profiles.
• Conduct security reviews and firewall rule audits.
• Troubleshoot connectivity and security incidents.

Cybersecurity & Risk Management

• Assist with implementation of organizational cybersecurity strategy.
• Participate in security risk assessments and remediation initiatives.
• Conduct periodic security reviews and system hardening.
• Assist with compliance requirements including audit preparation.
• Support security awareness efforts and phishing response activities.
• Review security logs and investigate suspicious activities.
• Assist in maintaining disaster recovery and business continuity procedures.
• Maintain incident response documentation and runbooks.

Systems Administration & IT Operations

• Provide day-to-day administration of enterprise IT systems.
• Support Windows Server environments and cloud services.
• Troubleshoot hardware, software, network, and security issues.
• Manage DNS, DHCP, certificates, and network services.
• Support backup, recovery, and business continuity processes.
• Participate in infrastructure upgrades and technology projects.
• Assist with asset lifecycle management and inventory controls.
• Provide Tier 2 and Tier 3 technical support as required.

Monitoring & Reporting

• Monitor system health, security posture, infrastructure capacity, and performance.
• Generate operational and security reports for management.
• Track key performance indicators and security metrics.
• Maintain configuration baselines and documentation standards.

Documentation & Process Management

• Develop and maintain:
  • Standard Operating Procedures (SOPs)
  • Security runbooks
  • Network diagrams
  • System architecture documentation
  • Configuration records
  • Disaster recovery documentation
• Ensure all changes are documented according to change management procedures.
• Maintain accurate inventory of hardware, software, licenses, and security assets.

End User Support

• Provide technical support to employees across all business functions.
• Troubleshoot Microsoft 365, endpoint, network, and security-related issues.
• Support staff and executive users when necessary.
• Participate in after-hours support and critical incident response activities.
• Assist users with secure technology practices and cybersecurity awareness.

Disponibilidad para viajar

Essential Microsoft 365, Defender XDR, Sentinel, Intune, Entra ID. The rest will be nice to have.

Experience

• Minimum 2+ years of hands-on experience administering Microsoft 365 environments.
• Minimum 2+ years of cybersecurity and endpoint security administration experience.
• Experience supporting enterprise network and security infrastructure.
• Experience working in a fast-paced corporate IT environment.
• Experience with security incident response and vulnerability management.

Required Technical Skills

Microsoft Technologies

• Microsoft 365 Administration
• Exchange Online
• SharePoint Online
• Microsoft Teams
• OneDrive for Business
• Microsoft Sentinel
• Conditional Access
• MFA
• Identity Protection
• Privileged Identity Management (PIM)

Security Technologies

• SIEM Administration
• Vulnerability Management
• Threat Hunting
• Security Monitoring
• Security Operations Center (SOC) Processes
• Zero Trust Framework
• Security Hardening

Scripting & Automation

• PowerShell
• Basic automation and scripting development
• Microsoft security automation workflows