M365 Security and Compliance Administrator

4A Consulting, LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive benefits package

Flexible work options

Job summary

4A Consulting, LLC seeks a Senior M365 Security and Compliance Administrator to strengthen security and compliance for a GCC Microsoft 365 environment. You will lead policies, guardrails, data classifications, and mail flow security across identity, endpoint, and collaboration ecosystems.

The role requires hands-on expertise with Defender, Purview, Intune, Sentinel, and Entra ID, delivering risk remediation, audit support, and strategic improvements for federal and commercial clients.

Qualifications

• 8+ years of professional experience with a Bachelor’s degree (or equivalent).
• Hands-on Defender suite including Defender XDR, Defender for Endpoint, Defender for Cloud Apps.
• Experience with Sentinel SIEM and cross‑platform telemetry pipelines.

Responsibilities

• Lead the development and management of Microsoft 365 security policies and guardrails.
• Manage Purview capabilities including data classification, sensitivity labeling, retention, and DLP.
• Define and enforce Exchange Online security policies, encryption, labeling, and mail flow.

Skills

PowerShell

Conditional Access

Microsoft Defender

Microsoft Purview

Exchange Online

Entra ID

Intune

Microsoft Sentinel

Data Loss Prevention

Azure services

Education

Bachelor’s degree

Tools

Microsoft Defender

Sentinel SIEM

Intune

Purview

Exchange Online

Entra ID

Okta connectors

Jamf

Job description

At 4A Consulting, we turn complexity into opportunity. Founded in 2014 and headquartered in Baltimore, MD, we are a women-owned, boutique consulting firm specializing in delivering innovative, data-driven solutions to both the Federal Government and Fortune 500 clients. Our team blends deep industry knowledge with advanced technologies to design tailored strategies that drive measurable and sustainable outcomes. We pride ourselves on an agile, collaborative approach that helps organizations navigate challenges and seize emerging opportunities in a rapidly evolving digital landscape. At 4A, we don’t just deliver projects, we build trusted partnerships that empower our clients to lead with confidence in the digital age.

Position Overview

We are seeking a Senior M365 Security and Compliance Administrator to manage and enhance the security and compliance posture of a Microsoft 365 environment within a Government Community Cloud (GCC) tenant. The ideal candidate will have strong expertise across Microsoft 365 security, Microsoft Purview, Exchange Online, Entra ID, Conditional Access, Intune, Microsoft Defender, Microsoft Sentinel, and Azure.

This role will serve as a senior engineering resource across the organization’s device, identity, endpoint, and M365 security ecosystem. The successful candidate will provide hands-on technical leadership, respond to vulnerabilities and operational risks, support compliance and audit activities, and drive continuous improvements to the overall security posture.

Key Responsibilities

• Lead the development, implementation, and management of Microsoft 365 security policies, standards, and technical guardrails.
• Manage Microsoft Purview capabilities, including data classification, sensitivity labeling, retention, and Data Loss Prevention (DLP).
• Define and enforce Exchange Online email security policies, including encryption, sensitivity labeling, and secure mail flow.
• Implement and maintain email encryption solutions such as S/MIME and Microsoft Information Protection.
• Administer and monitor anti-spam, anti-phishing, and anti-malware protections.
• Design and manage Entra ID Conditional Access policies based on device compliance across Windows, macOS, and mobile platforms.
• Investigate and remediate Conditional Access failures, identity anomalies, and external or guest access issues.
• Design, test, and deploy Microsoft Intune configuration and compliance policies across Windows, macOS, and iOS/iPadOS.
• Develop PowerShell remediation scripts and configuration profiles to address compliance gaps and enforce security baselines.
• Coordinate vulnerability mitigation efforts, vendor fixes, security baseline updates, and endpoint security improvements.
• Establish and manage security risk processes across the Microsoft 365 environment, including ATO and compliance control assessments.
• Develop implementation statements, collect compliance artifacts, and provide evidence for audits and security assessments.
• Lead the integration and operational management of Microsoft Defender and Microsoft Sentinel for threat detection, alerting, and response.
• Build and maintain SIEM integrations and telemetry pipelines for Microsoft 365, identity, collaboration, and third-party systems.
• Develop log ingestion solutions using Azure Function Apps and other Azure services.
• Tune audit retention, analytic rules, and alert logic to improve security monitoring and investigation readiness.
• Provide Tier 3 troubleshooting for device compliance, identity and access, telemetry, and endpoint security issues.
• Collaborate with cybersecurity, operations, enterprise architecture, identity, and other cross-functional teams to resolve security and operational issues.
• Provide technical leadership during security reviews, operational meetings, and high-severity incidents.
• Continuously evaluate Microsoft 365 security and compliance updates and recommend improvements to the organization’s security posture and operational efficiency.

Required Qualifications

• 8+ years of professional experience with a Bachelor’s degree; additional relevant experience may be substituted for the degree.
• Deep hands-on experience with Microsoft Defender, including Defender XDR, Defender for Endpoint, and Defender for Cloud Apps.
• Hands-on experience with Microsoft Sentinel SIEM and cross-platform telemetry pipelines.
• Expert-level Microsoft Intune engineering experience across Windows, macOS, iOS, and iPadOS.
• Advanced PowerShell skills for remediation, automation, and operating system image manipulation.
• Strong understanding of Conditional Access Policy (CAP) architecture and identity risk enforcement.
• Experience with ATO control evidence, compliance mapping, and audit support.
• Strong knowledge of Microsoft 365 security and compliance capabilities, including Microsoft Purview, Exchange Online, Entra ID, Intune, Defender, and Sentinel.
• Strong cross-team collaboration skills across cybersecurity, operations, enterprise architecture, identity and access management, and communications teams.
• Excellent written and verbal communication skills, including the ability to translate technical and security issues into clear business and user-impact summaries.
• Strong documentation, troubleshooting, ownership, and situational awareness skills.

Preferred Qualifications

• Experience working in federal security, highly regulated, or high-assurance environments.
• Experience with Jamf for endpoint management.
• Experience with Okta connectors and identity integrations.
• Experience with Microsoft Graph API operations.
• Experience with Copilot audit logging and monitoring.
• Experience with Microsoft Security Compliance Toolkit (mSCP) baseline engineering.
• Experience with macOS security hardening.
• Prior experience implementing enterprise-wide Conditional Access enforcement.
• Experience supporting GCC environments and federal security/compliance requirements.

Why Join 4A

• Be part of a mission-driven, women-owned consulting firm with a reputation for excellence.
• Work on high-impact projects across federal and commercial clients.
• Collaborate in an inclusive, growth-oriented culture where innovation is valued.
• Access career development programs, mentorship, and learning opportunities.
• Enjoy a comprehensive benefits package, flexible work options, and a focus on work-life balance.

Equal Opportunity Statement

4A Consulting is an Equal Opportunity Employer committed to an inclusive hiring process. Applicants requiring a reasonable accommodation due to a disability may contact [e-mail]. This email is intended solely for accommodation requests.

Please note that 4A Consulting participates in the federal E-Verify program. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the US. 4A Consulting will only use E-Verify once you have accepted a job offer and completed the Form I-9.