AI / M365 Security and Identity Governance Engineer

AIS (Applied Information Sciences); United States; On-site; USD 117,000 - 177,000; Full time

Job summary

AIS is seeking a Lead Software Engineer to design and implement AI / M365 security and identity governance for a federal customer. You will lead security architecture, Entra ID, CA, RBAC, and governance controls while ensuring scalable, compliant deployments.

You will collaborate with engineering and security stakeholders, drive secure-by-default solutions, and mentor junior engineers. The role requires 6+ years in Microsoft cloud security and a strong track record delivering regulated

Qualifications

• 6+ years in Microsoft cloud security or identity engineering.
• Hands-on with Entra ID, CA, RBAC, PIM, Azure Policy, and secure Azure networking.
• Experience with Microsoft Purview, M365 security, or data-protection controls.
• Knowledge of NIST-based controls and regulated-environment delivery.
• Ability to balance secure design with delivery outcomes.

Responsibilities

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls.
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads.
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements.
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls.
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders.
• Develop clear security standards and operational procedures that delivery and O&M teams can execute.

Skills

Team leadership

Entra ID

Conditional Access

RBAC

Azure Policy

Azure networking

M365 security

Job description

Why AIS?

When you join AIS, you're joining a mission-driven team that is passionate about making a difference. You'll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.

• Employee Ownership: Your contributions directly impact the company's success, and you share in its achievements.
• Continuous Learning: Access to resources, training, and mentorship to support your professional growth.
• Inclusive Culture: A workplace where diversity is celebrated, and everyone's voice is valued.
• Mission-Driven Work: Engage in projects that make a meaningful difference for our clients and communities.

Why AIS?

When you join AIS, you're joining a mission-driven team that is passionate about making a difference. You'll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.

• Employee Ownership: Your contributions directly impact the company's success, and you share in its achievements.
• Continuous Learning: Access to resources, training, and mentorship to support your professional growth.
• Inclusive Culture: A workplace where diversity is celebrated, and everyone's voice is valued.
• Mission-Driven Work: Engage in projects that make a meaningful difference for our clients and communities.

What are we looking for?

At AIS, we're looking for more than just skills - we're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.

Working@AIS

At AIS, we are dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects. For this position, we are seeking a talented individual to join AIS as a Lead Software Engineer.

• Core Knowledge & Skills: Operates independently or as a team lead, selects appropriate persistence technologies (e.g., EF, Dapper), defines source control strategies, and designs subsystem infrastructure.
• Work & Complexity: Tackles complex problems with thorough analysis, manages cross-functional delivery, and improves system reliability and scalability.
• Quality & Independence: Consistently meets deadlines even under challenging conditions, enforces standards through detailed reviews, and establishes productivity benchmarks for the team.
• Teamwork & Communication: Provides functional leadership by setting objectives, organizing resources, resolving conflicts, and engaging confidently with both internal and external stakeholders.
• Consulting & Engagement: Troubleshoots advanced client issues, supports requirements gathering, and contributes to vendor presentations or proposal activities.

As your initial project assignment, you will support the unique needs of our client as a AI / M365 Security and Identity Governance Engineer.

Project Summary

AIS is seeking an AI / M365 Security and Identity Governance Engineer that can support a federal customer in engineering security, identity, and governance controls that allow AI, virtual desktop, and Microsoft 365 services to scale safely in a regulated environment.

Key Responsibilities

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls.
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads.
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements.
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls.
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders.
• Develop clear security standards and operational procedures that delivery and O&M teams can execute.

Required For This Opportunity

• 6+ years in Microsoft cloud security or identity engineering.
• Hands-on expertise with Entra ID, Conditional Access, RBAC, PIM, Azure Policy, and secure Azure networking.
• Experience implementing Microsoft Purview, M365 security, or data-protection controls.
• Working knowledge of NIST-based controls and regulated-environment delivery.
• Ability to balance secure design with practical adoption and delivery outcomes.

Nice To Have Skills

• Azure Government or GCC High experience.
• Microsoft security certifications such as SC-300, SC-100, or SC-200.
• AI-security, data-governance, or Zero Trust implementation experience.

At AIS, we are committed to offering competitive and fair compensation that reflects the skills, experience, and contributions of each team member. The targeted base salary range for this role is $117,000-$177,000 per year. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location. We value transparency in our hiring process and are happy to discuss how your unique qualifications align with our compensation structure during the interview process.

Applied Information Sciences does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, disability, protected veteran status, or any other basis. Employment decisions are based solely on qualifications, merit, and business needs.