Remote Security Engineer: M365 & Identity Protection

Engageware; Mexico; Hybrid; PHP 6,716,000 - 10,379,000; Full time

Job summary

Engageware is seeking a Corporate Security Engineer to join our Global Platform Operations team. This hands-on role focuses on Microsoft 365 security, Entra ID, Intune, and Defender to harden our cloud-native SaaS stack.

You will own security infrastructure, serve as escalation for complex IT issues, and help shape the security posture across the SaaS estate while working remotely for a Mexico-based contractor setup.

Qualifications

• 4+ years of hands-on IT security or security engineering experience.
• Deep working knowledge of Microsoft Entra ID, Conditional Access, identity governance, app registrations, privileged roles, and authentication methods including FIDO2.
• Practical experience with Microsoft Intune for Windows and Addigy for macOS.
• Proficiency with Microsoft Defender and the M365 security portal.
• Hands-on experience with data loss prevention (DLP) and cloud or insider-risk anomaly detection, e.g. Purview DLP, Defender for Cloud Apps, Purview Insider Risk Management.
• Experience administering core M365 services (Exchange Online, SharePoint, Teams, OneDrive), including licensing, transport rules, and shared mailbox management.
• Strong English communication skills, written and verbal; collaboration with US-based leadership.
• Ability to work independently and drive projects to completion.
• Experience using AI tools (e.g., Claude) to draft scripts and automations.

Responsibilities

• Own Entra ID configuration including Conditional Access policies, identity governance, privileged access controls, and breakglass procedures.
• Design, deploy, and maintain device compliance policies across Intune for Windows and macOS endpoints.
• Configure, tune, and validate Defender and Defender for Cloud Apps detection and alert response workflows in coordination with MDR.
• Configure data‑exfiltration and insider‑risk detection across the M365 estate and validate controls.
• Design and own security automation for user offboarding and privileged transitions.
• Evaluate, implement, and maintain SaaS backup coverage across M365 workloads and other platforms.
• Drive user lifecycle automation improvements.
• Administer and tune endpoint management tooling including ThreatLocker, Intune, and Addigy.
• Identify and close security gaps across the SaaS estate focusing on identity, data protection, and exfiltration prevention.

Skills

Entra ID

Conditional Access

Identity governance

Privileged access controls

PIM/PAM

Intune

Addigy

Microsoft Defender

Defender for Cloud Apps

DLP

Insider risk monitoring

Purview

Exchange Online

SharePoint

English communication

Scripting (PowerShell, Python)

Tools

Entra ID

Intune

Addigy

Microsoft Defender

Defender for Cloud Apps

Purview

Job description

Engageware is seeking a Corporate Security Engineer to join our Global Platform Operations team. This hands-on role focuses on Microsoft 365 security, Entra ID, Intune, and Defender to harden our cloud-native SaaS stack.

You will own security infrastructure, serve as escalation for complex IT issues, and help shape the security posture across the SaaS estate while working remotely for a Mexico-based contractor setup.