M365 Risk Engineer

TEK Systems; Charlotte (NC); Hybrid; USD 69,000 - 90,000; Full time

Job summary

TEKsystems seeks a M365 Risk Mitigation Engineer for a 24‑month contract in Charlotte, NC. The role centers on identifying, evaluating, and mitigating technology risks across Microsoft 365, Exchange, SharePoint, and related security tools.

You will own first‑line risk outcomes from identification through evidence‑based closure. You will collaborate with engineering, security, compliance, and risk governance teams to drive remediation, validate controls, and support audits in a large enterprise

Qualifications

• 7+ years in enterprise technology engineering, infrastructure, cybersecurity, or related field.
• 5+ years supporting productivity, collaboration, or information‑protection services.
• Bachelor's degree in a relevant field.
• Experience owning technology risks and remediation.
• Experience with vulnerability management across enterprise platforms.
• Experience with secure configuration management and patching.
• Experience with change control processes and production validation.
• Experience with audits, regulatory examinations, and risk committees.

Responsibilities

• Manage technology risk mitigation engineering across Productivity Engineering portfolio.
• Perform comprehensive risk assessments and prioritize remediation.
• Develop remediation strategies to reduce residual risk and prevent recurrence.
• Evaluate and validate security, operational, and recovery controls.
• Lead or support implementation of engineering solutions for security and compliance.
• Govern and support issue management, remediation planning, and risk acceptance.
• Establish risk monitoring, reporting, and governance frameworks.

Skills

Microsoft 365 administration

Risk assessments

Vulnerability management

Splunk analytics

Change control

Audits & regulatory

Incident management

Log analysis

Risk governance

Threat management

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Splunk

Microsoft Defender for Office 365

Microsoft Purview

Exchange Server

SharePoint

Windows/Linux

Job description

M365 Risk Mitigation Engineer

24 Month Contract

Charlotte, NC

W2 ONLY

Job Description

This contract role focuses on identifying, evaluating, and mitigating technology risks across enterprise productivity platforms, with a primary emphasis on Microsoft 365, Exchange, SharePoint, and related security and monitoring tools. You will own first-line risk outcomes from initial identification through evidence-based closure, ensuring that residual risk, control effectiveness, dependencies, and remediation status are clearly understood and communicated. The position blends hands‑on engineering with strong risk‑management judgment to design and validate controls, drive remediation, and strengthen the security, compliance, and resilience of critical productivity services.

Responsibilities

• Manage technology risk mitigation engineering across the Productivity Engineering portfolio, with a focus on Microsoft 365 and related platforms.
• Perform comprehensive technology risk assessments and prioritize remediation activities based on business impact, risk exposure, and operational dependencies.
• Develop and execute remediation strategies that address root causes, reduce residual risk, and prevent recurrence of issues.
• Evaluate and validate the effectiveness of security, operational, and recovery controls across productivity, collaboration, messaging, and information‑protection services.
• Lead or help lead the implementation of engineering solutions that improve security, regulatory compliance, and operational resilience for M365, Exchange, SharePoint, and associated systems.
• Govern and support issue management, including tracking, remediation planning, exception processes, and risk acceptance activities.
• Establish and maintain risk monitoring, reporting, and metrics, as well as executive governance frameworks that provide clear visibility into risk posture and remediation progress.
• Support internal and external audits, regulatory reviews, risk committees, and control examinations through evidence‑based validation and thorough documentation.
• Strengthen platform resilience, recovery readiness, and technology lifecycle management for Microsoft 365, email, SharePoint, and related infrastructure.
• Act as a technical authority for operational risk decisions, providing guidance on control design, remediation options, and risk trade‑offs.
• Interpret and analyze logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings to identify and remediate risks.
• Coordinate with engineering, security, compliance, data, user experience, architecture, operations, and risk governance partners to ensure aligned and timely risk mitigation.
• Drive remediation from initial risk identification through validated closure, ensuring that corrective actions are implemented, tested, and documented.
• Support the design and execution of remediation architecture and production changes in a controlled and auditable manner.
• Utilize Splunk and other monitoring tools to perform search, analytics, monitoring, and risk reporting for productivity platforms.
• Contribute to automation and data‑quality improvements that enhance risk monitoring, evidence collection, and systems‑of‑record discipline.
• Manage technology vendors where required and drive vendor‑dependent remediation to completion.
• Allocate efforts across core areas such as M365/infrastructure engineering, technology risk and compliance, and stakeholder/audit management to ensure balanced and effective coverage.

Essential Skills

• At least 7 years of relevant experience in enterprise technology engineering, infrastructure, operations, cybersecurity, technology risk, or a closely related discipline.
• At least 5 years of hands‑on experience supporting enterprise productivity, collaboration, messaging, or information‑protection services.
• Bachelors degree in computer science, information systems, cybersecurity, engineering, or equivalent practical experience.
• Demonstrated experience owning technology risks and driving remediation from identification through validated closure.
• Proven experience conducting risk assessments, evaluating control design, testing operating effectiveness, documenting evidence, and determining residual risk.
• Experience with vulnerability management, including identifying, prioritizing, and remediating vulnerabilities across enterprise platforms.
• Experience with secure configuration management, lifecycle management, and patching of enterprise systems.
• Experience with formal change control processes and production validation for technology changes.
• Experience with incident and problem management, including root‑cause analysis and corrective‑action planning.
• Experience supporting audits, regulatory examinations, risk committees, and formal issue‑management processes.
• Hands‑on experience with Microsoft 365, including administration, configuration, and security hardening.
• Meaningful experience with at least three of the following: Exchange Server Subscription Edition or enterprise Exchange hybrid environments; SharePoint Server Subscription Edition or hybrid SharePoint environments; Splunk Enterprise; email hygiene, routing, authentication, anti‑spam, or anti‑malware platforms; Microsoft Defender for Office 365 or comparable threat‑management platforms; Microsoft Purview, data loss prevention, information protection, or audit capabilities.
• Ability to interpret logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings.
• Strong written and verbal communication skills, including the ability to present complex technical risk topics clearly to both engineering teams and leadership.
• Competence in technology risk assessment and prioritization, with a focus on practical, outcome‑based remediation.
• Competence in control design and operating‑effectiveness validation for security, operational, and recovery controls.
• Competence in vulnerability, configuration, and lifecycle risk management for enterprise platforms.
• Competence in Microsoft 365, Exchange, SharePoint, email‑security, and threat‑management engineering.
• Competence in Splunk search, analytics, monitoring, and risk reporting.
• Competence in remediation architecture and production change execution.
• Competence in resilience, recovery, incident, and problem management.
• Discipline in maintaining technical evidence, auditability, and systems‑of‑record for risk and control activities.

Additional Skills and Qualifications

• Experience managing technology vendors and driving vendor‑dependent remediation activities.
• Experience working in hybrid Exchange and SharePoint environments, including integration with Microsoft 365.
• Experience with Linux and cloud environments in the context of enterprise productivity or security platforms.
• Familiarity with email hygiene solutions, including routing, authentication, anti‑spam, and anti‑malware technologies.
• Exposure to Microsoft Defender for Office 365 or similar threat‑management platforms, including configuration and tuning.
• Exposure to Microsoft Purview or comparable data loss prevention, information protection, and audit capabilities.
• Experience working in environments where risk, compliance, and engineering teams collaborate closely to manage operational risk.
• Comfort working as a technical authority, providing guidance and recommendations to stakeholders at multiple levels.
• Ability to balance hands‑on engineering work with governance, documentation, and stakeholder management responsibilities.
• Strong organizational skills and attention to detail when managing multiple concurrent risk and remediation initiatives.

Work Environment

This is a contract role with an expected duration of approximately 24 months, based in the United States with primary work locations in Charlotte, North Carolina or Irving, Texas. The position follows a hybrid work model, requiring onsite presence three days per week and remote work for the remaining days, subject to team and project needs. You will work within a large‑scale enterprise environment that relies on Microsoft 365, Exchange, SharePoint, Splunk, Microsoft Defender for Office 365, Microsoft Purview, and related email‑security and threat‑management platforms. The environment emphasizes structured change control, formal risk and issue management, and rigorous auditability, including the use of systems of record to document evidence and control activities. You can expect to collaborate closely with engineering, operations, security, compliance, and risk governance teams, using a mix of Windows, Linux, and cloud‑based technologies. The dress code is typically business casual in office settings, with flexibility aligned to corporate policies and the hybrid nature of the role.

Job Type & Location

This is a Contract position based out of Charlotte, NC.

Pay and Benefits

The pay range for this position is $50.00 - $65.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job‑related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre‑tax and Roth post‑tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long‑term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a hybrid position in Charlotte,NC.

Application Deadline

This position is anticipated to close on Oct 12, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real‑world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.