Microsoft Security Engineer- Remote (Anywhere in the U.S.)

guidepointsecurity; United States; Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Fully remote within the U.S.

Group medical and dental insurance

Twelve corporate holidays plus a flexi

Time off program

Job summary

guidepointsecurity is seeking a hands-on security engineer focused on Microsoft cloud security for client engagements. You will own delivery of identity, data protection, and endpoint security implementations across organizations from small businesses to large enterprises.

Responsibilities include designing identity architecture with Entra ID, SSO, Intune, Purview, and Defender; deploying MFA, Conditional Access, and data loss prevention; and supporting hybrid and cloud environments.

Qualifications

• Two to five years in IT administration, identity management, or security operations.
• Hands-on production experience with Microsoft Entra ID and on-premises Active Directory.
• Working knowledge of SAML, OAuth 2.0 and OIDC, Kerberos, and LDAP.
• Experience implementing Microsoft Purview and supporting Intune and Defender XDR.

Responsibilities

• Design and implement identity architecture using Microsoft Entra ID and hybrid sync, including Conditional Access, MFA, passwordless, PIM, RBAC, and access reviews.
• Integrate applications via SSO (SAML and OIDC), enterprise app registrations, and SCIM provisioning.
• Investigate and remediate identity risks using Entra ID Protection and audit logs, and enforce tiered admin models with privileged account reduction.
• Deploy Microsoft Purview capabilities including sensitivity labels, data loss prevention, and retention policies across Microsoft 365.
• Configure Intune device compliance, configuration profiles, and app deployments across platforms.
• Support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.

Skills

Identity management

Security operations

Communication

Troubleshooting

Tools

Microsoft Entra ID

Active Directory

PowerShell

Microsoft Graph PowerShell

SAML

OAuth 2.0

OIDC

Kerberos

LDAP

Intune

Purview

Job description

Role overview

Hands-on security engineering role focused on Microsoft cloud security for client engagements. The engineer delivers identity, data protection, and endpoint security implementations across organizations ranging from small businesses to large enterprises, owning technical delivery independently with a billable utilization target.

Responsibilities

• Design and implement identity architecture using Microsoft Entra ID and hybrid sync, including Conditional Access, MFA, passwordless, PIM, RBAC, and access reviews.
• Integrate applications via SSO (SAML and OIDC), enterprise app registrations, and SCIM provisioning.
• Investigate and remediate identity risks using Entra ID Protection and audit logs, and enforce tiered admin models with privileged account reduction.
• Deploy Microsoft Purview capabilities including sensitivity labels, data loss prevention, and retention policies across Microsoft 365.
• Configure Intune device compliance, configuration profiles, and app deployments across platforms.
• Support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.

Requirements

• Two to five years in IT administration, identity management, or security operations.
• Hands-on production experience with Microsoft Entra ID and on-premises Active Directory.
• Working knowledge of SAML, OAuth 2.0 and OIDC, Kerberos, and LDAP.
• Experience implementing Microsoft Purview and supporting Intune and Defender XDR.
• Basic PowerShell scripting for automation and reporting, including Microsoft Graph PowerShell.
• Strong troubleshooting skills and clear written and verbal communication.

Nice to have

• Advanced Active Directory work such as multi-domain and multi-forest design, migrations, and legacy authentication cleanup.
• Microsoft Sentinel experience with log onboarding, detection development, or broader SIEM and SOAR exposure.
• Azure infrastructure and security including Azure Policy, network security, landing zones, and RBAC.
• SharePoint Online governance, Teams Voice, Power BI and Fabric, or Copilot Studio experience.

Benefits and work setup

• Fully remote within the U.S., with less than ten percent travel for corporate events.
• Group medical and dental insurance options.
• Twelve corporate holidays plus a flexible time off program.
• Mobile phone and home internet allowance.
• Retirement plan eligibility after two months and a pet benefit option.