We are seeking a Senior Microsoft Security/Compliance Engineer to help support our global cloud cyber security and compliance strategies. In this role, you will be an engineering/architectural force behind our Microsoft security/governance roadmap. You will secure our multi-cloud ecosystem, manage enterprise risk, and act as one of the advisors to leadership. If you are a cyber security engineer who moves past manual spreadsheets to build modern, automated cloud governance, we want you on our team.
Key Responsibilities
Security Configuration & Optimization (Microsoft Stack)
- Review, optimize, and maintain our existing configurations across Microsoft Entra ID (Identity Provider), Microsoft Intune (MDM), and Microsoft Defender (EDR).
- Design and define stringent security and device compliance policies to align with HIPAA and SOC 2 requirements.
- Continuously evaluate the environment to ensure our Microsoft security tools are deployed effectively and following best practices.
Compliance Reporting & Visibility (Power BI)
- Design, build, and maintain standard Power BI dashboards that provide clear visibility into identity risks, endpoint security posture, and MDM compliance.
- Serve as the primary reporting partner to the Compliance Manager, translating raw security data into actionable compliance metrics.
- Leverage built-in Microsoft connectors to aggregate data from Defender, Intune, and Entra ID into centralized reports.
- Act as the bridge between Security/Compliance and IT Operations.
- Define the remediation workflows for non-compliant devices or risky sign-ins, and effectively report these issues to the IT team for execution and resolution.
- Provide guidance and documentation to IT Helpdesk staff on how to resolve the compliance gaps your systems identify.
Qualifications
- Experience: 3+ years in IT Security, Systems Administration, or Cloud Security focusing heavily on the Microsoft ecosystem.
- Deep Microsoft Expertise: Proven experience configuring and managing Microsoft Entra ID, Microsoft Intune, and Microsoft Defender.
- Policy Design: Strong ability to design and evaluate Conditional Access policies, device compliance profiles, and EDR configurations.
- Reporting Skills (Power BI): Mandatory experience building standard dashboards in Power BI using native Microsoft data connectors to track security and compliance metrics.
- Workflow Management: Experience working in environments where security defines the policy and IT executes the fix. Excellent communication skills to bridge this gap.
- Advanced reporting skills, including writing custom KQL (Kusto Query Language) queries in Defender or querying the Microsoft Graph API.
- Familiarity with compliance frameworks (HIPAA, SOC 2) and how to map Microsoft security controls to those frameworks.
- Relevant Microsoft certifications (e.g., MS-500, SC-200, SC-300, or SC-400).