Associate Microsoft 365 Security Engineer — Hybrid

RSM

Chicago (IL)

Hybrid

USD 63,000 - 103,000

Full time

11 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

RSM is seeking an Associate to design, deploy, and advise on Microsoft 365 security solutions for clients in hybrid and cloud environments. You will lead technical conversations, translate security frameworks into practical M365 configurations, and own tasks from discovery through handoff.

The role emphasizes initiative, independence, and clear communication of security value to executives. You will work across Defender XDR, Entra ID, Intune and Purview, with exposure to policy design, data

Qualifications

2+ years of hands-on IT or security experience, ideally in Microsoft environments.
Strong written and verbal communication skills.
Experience with at least two of: Defender XDR, Entra ID, Purview, Intune.
Knowledge of on-premises infrastructure: Active Directory, DNS, Group Policy, Windows Server; Exchange is a plus.
Understanding of hybrid identity and authentication methods.
PowerShell for administration and scripting.
Knowledge of key security concepts: Zero Trust, least privilege, IAM, data classification, endpoint protection.
Willingness to travel occasionally to client sites.

Responsibilities

Client delivery: Plan, configure and deploy Microsoft 365 security solutions across Defender XDR, Entra ID, Intune and Purview.
Client delivery: Design and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies.
Client delivery: Build Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies.
Client delivery: Support hybrid scenarios like Entra Connect / Cloud Sync, on-prem AD, Group Policy and hybrid Exchange.
Client delivery: Run current-state assessments and produce findings, recommendations and roadmaps.
Client delivery: Automate configuration and reporting with PowerShell and Microsoft Graph.
Client engagement: Lead sessions and workshops with client IT/security stakeholders.
Client engagement: Map M365 controls to NIST CSF/CIS/ISO 27001; present trade-offs to technical and non-technical audiences.
Client engagement: Write deliverables like design documents, runbooks, status updates and executive summaries.
Team contribution: Manage tasks and timelines; raise risks early.
Team contribution: Contribute to reusable templates, scripts and policy frameworks.
Team contribution: Stay current on the Microsoft security roadmap and share learnings.