M365 Security Engineer, Associate – Defender XDR & Entra

RSM; Dubuque (IA); Hybrid; USD 63,000 - 103,000; Full time

Job summary

RSM is hiring an Associate to design, deploy and advise on Microsoft 365 security solutions for clients. You will work across Defender XDR, Entra ID, Intune and Purview in hybrid and cloud environments, leading technical conversations from discovery through handoff and shaping security posture for varied clients.

You will own tasks, show initiative, and articulate the business value of strong M365 security to executives while staying current with platform updates and industry standards.

Qualifications

• 2+ years of hands-on IT or security experience, ideally in Microsoft environments.
• Strong written and verbal communication skills.
• Practical experience with at least two of: Defender XDR, Entra ID, Purview, Intune.
• Working knowledge of on-premises infrastructure: Active Directory, DNS, Group Policy, Windows Server and, ideally, Exchange Server.
• Understanding of hybrid identity, including directory synchronization and authentication methods.
• Familiarity with PowerShell for administration and scripting.
• Working knowledge of core security concepts: Zero Trust, least privilege, IAM, data classification and endpoint protection.
• Ability to travel occasionally to client sites.

Responsibilities

• Plan, configure and deploy Microsoft 365 security solutions across Defender XDR, Entra ID, Intune and Purview.
• Design and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies.
• Build Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies.
• Support hybrid scenarios such as Entra Connect / Cloud Sync, on-premises Active Directory, Group Policy and hybrid Exchange.
• Run current-state assessments and produce findings, recommendations and roadmaps.
• Automate configuration and reporting with PowerShell and Microsoft Graph.
• Lead working sessions and workshops with client IT and security stakeholders.
• Explain how M365 controls map to security frameworks such as NIST CSF, CIS Benchmarks, ISO 27001.
• Present recommendations and trade-offs clearly to both technical and non-technical audiences.
• Write polished deliverables: design documents, runbooks, status updates and executive summaries.

Skills

Microsoft Defender XDR

Entra ID

Microsoft Purview

Intune

PowerShell

Microsoft Graph

Education

Bachelor's degree in information technology, cybersecurity, computer science or related field

Tools

Active Directory

Job description

RSM is hiring an Associate to design, deploy and advise on Microsoft 365 security solutions for clients. You will work across Defender XDR, Entra ID, Intune and Purview in hybrid and cloud environments, leading technical conversations from discovery through handoff and shaping security posture for varied clients.

You will own tasks, show initiative, and articulate the business value of strong M365 security to executives while staying current with platform updates and industry standards.