Microsoft Service Engineer

AgreeYa Solutions; Indianapolis (IN); On-site; USD 110,000 - 140,000; Full time

Job summary

AgreeYa Solutions is seeking a Senior Microsoft Service Engineer to lead security strategy and operations across the Microsoft ecosystem. You will configure Defender, Entra ID, Purview, Intune, and related services while guiding junior engineers and handling incidents with urgency and precision.

The role requires hands-on desktop support and collaboration with cross-functional teams, with flexibility for evenings and holidays as business needs arise. Strong leadership is essential.

Qualifications

• Lead cybersecurity strategy and day-to-day security operations within the Microsoft environment.
• Monitor, triage, and respond to security events and incidents across Microsoft 365 and Defender suites.
• Mentor junior teammates in Microsoft administration and security best practices.

Responsibilities

• Lead cybersecurity strategy and day-to-day security operations within the Microsoft environment, including monitoring the company’s security posture, triaging and investigating alerts, and leading the response to security events and incidents.
• Configure and manage company security using Defender suite and Purview, including data loss prevention and sensitivity labels.
• Manage Exchange Online mail flow rules and anti-phishing/anti-spam policies.
• Oversee Entra ID security, including Conditional Access, MFA, phishing-resistant authentication, and identity protection.
• Utilize Defender for Endpoint to manage EDR, investigate alerts, and ensure devices are patched monthly and for zero-day risks.
• Manage user accounts, groups, and licensing via Microsoft 365 Admin Center and related portals.
• Configure Teams, OneDrive, SharePoint, and Outlook to support collaboration.
• Use Intune to configure devices, apps, and security baselines, including Autopilot and update policies.
• Act as primary contact with Microsoft MDR partners and coordinate external monitoring.
• Compile security audit data and posture reports for Technology leadership.
• Mentor junior Technology team members on Microsoft administration and security.

Skills

Cybersecurity strategy

Security operations

Incident response

M365 administration

Identity protection

Cloud security

Leadership / mentorship

Tools

Microsoft Defender

Microsoft Entra Admin Center

Exchange Admin Center

Power Automate

Job description

The Senior Microsoft Service Engineer is a senior-level position responsible for supporting the overall technology ecosystem

The scope of this role includes Microsoft technologies and other corporate software applications, with a primary focus on Microsoft.

This role leads cybersecurity efforts within the Microsoft environment, including security strategy, configuration, monitoring, and incident response across Microsoft 365 (E3 and E5 licensing), Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and Microsoft Intune.

Core responsibilities include the configuration, maintenance, and troubleshooting of the Microsoft systems leveraged by, including Exchange Online, SharePoint, OneDrive, Teams, and Power Automate.

This role owns the monitoring of cybersecurity posture within the Microsoft ecosystem and leads the response to security events and incidents.

Due to the senior nature of this role, there is a strong expectation of mentorship of junior members of the team.

This role will also support in a general technical capacity, including hands-on desktop support and other technical duties as the individual’s skills and the needs of the business allow.

This individual must be able to work a flexible schedule including some evenings, weekends, and holidays, and must have the ability to work under pressure and meet deadlines.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Lead cybersecurity strategy and day-to-day security operations within the Microsoft environment, including monitoring the company’s security posture, triaging and investigating alerts, and leading the response to security events and incidents.
• Configure and manage company security using the Microsoft Defender suite (Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity) and Microsoft Purview, including:
• Data Loss Prevention (DLP) policies and sensitivity labels
• Exchange Online mail flow (transport) rules and anti-phishing/anti-spam policies
• Microsoft Entra ID security, including Conditional Access, multifactor and phishing-resistant authentication (FIDO2/passkeys), and identity protection
• Leverage Microsoft Defender for Endpoint to manage Endpoint Detection and Response (EDR) for company devices, investigate and respond to alerts, and ensure devices are patched monthly and in response to zero-day vulnerabilities.
• Manage user accounts, groups, and licensing through the Microsoft 365 Admin Center, Microsoft Entra admin center, and Exchange Admin Center.
• Configure and manage Microsoft Teams, OneDrive, SharePoint, and Outlook to support the company’s overall collaboration.
• Leverage Microsoft Intune and Microsoft Entra ID to configure and manage company devices, applications, and user profile settings, including device configuration and compliance profiles, Windows Autopilot, Windows and application update policies, and company-specific security baselines.
• Act as the primary contact between Microsoft third-party security monitoring/managed detection and response (MDR) partner.
• Compile, interpret, and present Microsoft security audit data, Secure Score, and security posture reporting to Technology leadership.
• Mentor junior members of the Technology team on Microsoft administration and security best practices.

About AgreeYa

AgreeYa is a global systems integrator delivering competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 2,200 staff across offices. AgreeYa works with 500+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public sector, Pharma & Biotech, and others. Please visit us at www.agreeya.com for more information. AgreeYa is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, gender identity, sexual orientation, national origin, disability, veteran status or other protected characteristics. Visit our website to learn about our Career & Culture.