GCC: Senior M365 Security & Endpoint Engineer

Leidos Inc; Reston (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an experienced M365 Security and Compliance Administrator to join our Information Technology team in Reston, VA. You will secure the M365 ecosystem, enforce compliance controls, and drive incident response across Windows, macOS, and mobile devices within a GCC tenant.

You will lead governance for data protection, email security, identity access, and endpoint protection using Defender, Sentinel, and Intune.

Qualifications

• Bachelor's Degree and 8+ years of experience. 4 additional years of experience may be substituted in lieu of degree.
• US Citizenship or US Person with ability to obtain Public Trust level 5 clearance.
• Deep experience with Microsoft Defender (XDR, Endpoint, Cloud Apps).
• Hands-on with Sentinel SIEM and cross-platform telemetry pipelines.
• Expert-level Intune engineering across Windows/macOS/iOS/iPadOS.

Responsibilities

• Lead the development, implementation, and ongoing management of M365 security policies and guardrails aligned to federal requirements.
• Own governance for data protection capabilities including DLP using Microsoft Purview.
• Define and enforce email security policies (encryption, labeling, secure mail flow).
• Engineer and validate device-compliance-based Conditional Access across platforms.
• Design, test, and deploy Intune configuration and compliance policies; develop remediation scripts.
• Stay current on M365 security updates and drive improvements to posture and efficiency.

Skills

Microsoft Defender

Sentinel SIEM

Intune

PowerShell

CAP architecture

ATO compliance

Cross-team collaboration

Clear communication

Reliability

Education

Bachelor's Degree

Tools

Windows/macOS/iOS/iPadOS

GCC environment

Job description

Leidos is seeking an experienced M365 Security and Compliance Administrator to join our Information Technology team in Reston, VA. You will secure the M365 ecosystem, enforce compliance controls, and drive incident response across Windows, macOS, and mobile devices within a GCC tenant.

You will lead governance for data protection, email security, identity access, and endpoint protection using Defender, Sentinel, and Intune.