Associate - Microsoft 365 Security Engineer

RSM US; Chicago (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

RSM US LLP in Chicago seeks an Associate to design, deploy and advise on Microsoft 365 security solutions for clients, spanning Defender XDR, Entra ID, Intune and Purview in hybrid and cloud environments.

In this client-facing role you will lead technical conversations, translate security frameworks into actionable configurations, and own tasks from discovery to handoff, taking initiative and communicating business value clearly.

Qualifications

• 2+ years of hands-on IT or security experience in Microsoft environments.
• Strong written and verbal communication skills.
• Practical experience with at least two of: Defender XDR, Entra ID, Purview, Intune.
• Knowledge of on-premises infrastructure: Active Directory, DNS, Group Policy, Windows Server, Exchange.
• Understanding of hybrid identity and authentication methods.
• Familiarity with PowerShell for administration.
• Willingness to travel occasionally to client sites.

Responsibilities

• Plan, configure and deploy Microsoft 365 security solutions across Defender XDR, Entra ID, Intune and Purview.
• Design and implement Conditional Access, Privileged Identity Management, MFA and identity policies.
• Build Purview data protection controls, including sensitivity labels, DLP and retention.
• Support hybrid scenarios such as Entra Connect / Cloud Sync and on-premises AD.
• Run current-state assessments, produce findings and roadmaps.
• Automate configuration and reporting with PowerShell and Graph.

Skills

IT/security experience

Communication skills

Defender XDR

Entra ID

Purview

Intune

Active Directory

DNS

Group Policy

PowerShell

Hybrid identity

Zero Trust

Education

Bachelor's degree in IT or related field

Microsoft certifications (e.g., SC-300, SC-200, SC-401, MS-102, AZ-500, SC-900, MS-900)

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

Role overview

We are hiring an Associate to design, deploy and advise on Microsoft 365 security solutions for our clients. You will work across Microsoft Defender XDR, Entra ID, Microsoft Intune and Microsoft Purview, in both hybrid and full cloud environments.

This is a client-facing consulting role where you will be expected to have professionalism and strong business acumen. You will help lead technical conversations, translate security frameworks into practical M365 configurations, and own your tasks from discovery through handoff. We want someone who takes initiative, figures things out independently, and can speak confidently about what strong security posture can look like in a Microsoft 365 environment.

Who we are looking for

• Driven self-starter. You take ownership of your work and move it forward without waiting to be told the next step.
• Resourceful problem solver. When you hit something new, you dig in: Microsoft Learn, documentation, community forums, a test tenant. You come back with an answer or a well-formed question.
• Critical thinker. You ask why a control exists, weigh the trade-offs, and recommend what fits the client's risk and business needs rather than defaulting to a checklist.
• Confident communicator. You can explain a Conditional Access design to an engineer and its business value to an executive. You speak credibly about security standards and M365 capabilities, and you are comfortable saying "let me confirm and follow up."
• Client-focused. You build trust, manage expectations and represent the team professionally.
• Curious and coachable. You keep up with a fast-moving platform and welcome feedback.

Our Expectations (Key responsibilities)

Client delivery

• Plan, configure and deploy Microsoft 365 security solutions across Defender XDR (Defender for Endpoint, Office 365, Identity and Cloud Apps), Entra ID, Intune and Microsoft Purview
• Design and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies
• Build Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies
• Support hybrid scenarios such as Entra Connect / Cloud Sync, on-premises Active Directory, Group Policy and hybrid Exchange
• Run current-state assessments and produce findings, recommendations and roadmaps
• Automate configuration and reporting with PowerShell and Microsoft Graph

Client engagement

• Lead working sessions and workshops with client IT and security stakeholders
• Explain how M365 controls map to security frameworks such as NIST CSF, CIS Benchmarks, ISO 27001
• Present recommendations and trade-offs clearly to both technical and non-technical audiences
• Write polished deliverables: design documents, runbooks, status updates and executive summaries

Team contribution

• Manage your own tasks and timelines, and raise risks early
• Contribute to reusable templates, scripts and standard policy frameworks
• Stay current on the Microsoft security roadmap and share what you learn with the team

Required qualifications

• 2+ years of hands‑on IT or security experience, ideally in Microsoft environments
• Strong written and verbal communication skills
• Practical experience with at least two of: Microsoft Defender XDR, Entra ID, Microsoft Purview, Intune
• Working knowledge of on‑premises infrastructure: Active Directory, DNS, Group Policy, Windows Server and, ideally, Exchange Server
• Understanding of hybrid identity, including directory synchronization and authentication methods
• Familiarity with PowerShell for administration and scripting
• Working knowledge of core security concepts: Zero Trust, least privilege, identity and access management, data classification and endpoint protection
• Ability to travel occasionally to client sites

Preferred qualifications

• Bachelor's degree in information technology, cybersecurity, computer science or a related field, or equivalent work experience
• Microsoft certifications such as SC-300 (Identity and Access Administrator), SC-200 (Security Operations Analyst), SC-401 (Information Security Administrator), MS-102 (Microsoft 365 Administrator) or AZ-500, SC-900, MS-900 or willing to obtain any of these in 3 months
• Broader security certifications such as Security+, CISSP (or progress toward it) or CCSP
• Prior consulting or managed services experience across multiple client tenants
• Experience with Intune and device compliance as it relates to Conditional Access
• Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagem