AI + M365 Security & Identity Governance Engineer

AIS (Applied Information Sciences); United States; On-site; USD 117,000 - 177,000; Full time

Job summary

AIS is seeking a Lead Software Engineer to design and implement AI / M365 security and identity governance for a federal customer. You will lead security architecture, Entra ID, CA, RBAC, and governance controls while ensuring scalable, compliant deployments.

You will collaborate with engineering and security stakeholders, drive secure-by-default solutions, and mentor junior engineers. The role requires 6+ years in Microsoft cloud security and a strong track record delivering regulated

Qualifications

• 6+ years in Microsoft cloud security or identity engineering.
• Hands-on with Entra ID, CA, RBAC, PIM, Azure Policy, and secure Azure networking.
• Experience with Microsoft Purview, M365 security, or data-protection controls.
• Knowledge of NIST-based controls and regulated-environment delivery.
• Ability to balance secure design with delivery outcomes.

Responsibilities

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls.
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads.
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements.
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls.
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders.
• Develop clear security standards and operational procedures that delivery and O&M teams can execute.

Skills

Team leadership

Entra ID

Conditional Access

RBAC

Azure Policy

Azure networking

M365 security

Job description

AIS is seeking a Lead Software Engineer to design and implement AI / M365 security and identity governance for a federal customer. You will lead security architecture, Entra ID, CA, RBAC, and governance controls while ensuring scalable, compliant deployments.

You will collaborate with engineering and security stakeholders, drive secure-by-default solutions, and mentor junior engineers. The role requires 6+ years in Microsoft cloud security and a strong track record delivering regulated