Microsoft 365 Security & Compliance Specialist

RED CANYON TECHNOLOGIES LLC; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Health, dental, vision coverage

Retirement plan with company match

Paid time off and educational support

Job summary

Diné Development Corporation (DDC) seeks a Microsoft 365 Security & Compliance Specialist to administer GCC/G5 security, data loss prevention, Defender, and Entra ID controls for federal environments in Washington, DC.

Requires a Bachelor's degree and 6+ years in cybersecurity, including 5+ years with M365 E5/G5. U.S. citizen with favorable Tier 2 Public Trust; Security+ is required with additional certifications preferred.

Qualifications

• Bachelor’s degree and at least 6 years of cybersecurity experience.
• Minimum 5 years administering Microsoft 365 E5/G5 security and compliance workloads.
• U.S. citizenship with favorable Tier 2 Public Trust adjudication required.
• Security+ certification required; additional certifications preferred.

Responsibilities

• Configure, administer, and tune Purview DLP policies and rules.
• Manage Defender for Endpoint and Defender for Cloud Apps policies; investigate detections.
• Administer Entra ID security controls and cloud security policies.
• Monitor security alerts and adjust controls per threat intel and agency requirements.
• Maintain secure cloud collaboration and coordinate site permissions and data protection.
• Document configurations and provide monthly KPI reports and evidence for reviews.

Skills

Microsoft 365 E5/G5 security

Security+ certification

FISMA knowledge

FedRAMP knowledge

Zero Trust architecture

Education

Bachelor's degree

Tools

Microsoft Purview

Defender for Endpoint

Defender for Cloud Apps

Entra ID

SharePoint administration

Job description

The Microsoft 365 Security & Compliance Specialist administers Microsoft 365 GCC G5 security, compliance, identity and data protection controls.***This position is contingent upon contract award.***ResponsibilitiesConfigure, administer, and tune Microsoft Purview data loss prevention policies and rules; investigate sensitive data exposure alerts and document corrective actions.Manage Defender for Endpoint and Defender for Cloud Apps policies, investigate detections, and coordinate endpoint and cloud remediation.Administer Entra ID security controls, identity protection, and cloud security policies; support privileged access oversight and approved access changes.Monitor Microsoft 365 security and compliance alerts and configurations; adjust controls to reflect threat information and agency requirements.Maintain secure cloud collaboration and coordinate site permissions, data protection, and user impacts with the SharePoint administrator.Support incident investigation and containment with the Cybersecurity Operations Lead, preserving technical evidence and recording policy changes.Document configurations, procedures, and user guidance; provide monthly data protection KPI reports and evidence for risk reviews and authorization packages.Provide qualified backup support across cybersecurity functions and support transition and knowledge transfer.QualificationsEducation and Experience: Bachelor’s degree and at least 6 years of relevant cybersecurity experience, including at least 5 years administering Microsoft 365 E5/G5 security and compliance workloads.Clearance Requirements: U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.Certification Requirements: Security+ required. Cybersecurity Architect Expert, Security Operations Analyst, or M365 Security Administrator certification, preferred.Any other work-related qualifications needed for the role:M365 E5/G5 security, federal cloud policies, FISMA, FedRAMP and Zero Trust; GCC/G5 operational experience preferred.Salary Range: $148,000 to $168,000The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.About UsDiné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.BenefitsEligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.Equal Opportunity & Compliance StatementThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.We participate in E-Verify.DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]