Remote Microsoft Cloud Security Engineer

GuidePoint Security LLC; United States; Remote; USD 110,000 - 165,000; Full time

Benefits offered by this job

Remote work

Health insurance

Dental insurance

Flexible time off

Phone stipend

Retirement plan eligibility

Pet benefit

Job summary

GuidePoint Security LLC seeks a security-focused engineer to deliver hands-on Microsoft Cloud Security engagements. You will design identity architecture (Entra ID), set up hybrid sync, CA, MFA, RBAC, and governance.

You’ll implement SSO, SCIM provisioning, and Purview data protection while supporting Intune and Defender XDR across hybrid environments. The role centers on independent delivery (80% billable) and collaboration with architects, with a strong emphasis on security posture and

Qualifications

• Bachelor's degree preferred.
• 2-5 years in IT administration, identity management, or security operations.
• Hands-on with Microsoft Entra ID and on-prem Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).
• Knowledge of SAML, OAuth 2.0/OIDC, Kerberos, LDAP.
• Experience implementing Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery) and supporting Intune and Defender XDR.
• Basic PowerShell scripting for automation and reporting (Microsoft Graph PowerShell).
• Strong troubleshooting and communication skills; able to convey complex concepts clearly.
• Willingness to embrace emerging AI tools to improve security outcomes.

Responsibilities

• Design and implement identity architecture, hybrid sync (Entra Connect), CA, MFA/passwordless, and identity governance (PIM, RBAC, reviews).
• Integrate apps via SSO (SAML/OIDC) and SCIM provisioning.
• Investigate and remediate identity risks using Entra ID logs; drive identity hygiene.
• Design and implement Purview data protection, sensitivity labels, DLP, and retention policies.
• Support eDiscovery, Insider Risk Management, and AI data security readiness for engagements.
• Configure Intune and Defender XDR: device compliance, profiles, apps across platforms.
• Adhere to GuidePoint Security Core Values and manage client engagements.

Skills

Microsoft Entra ID

Intune

Defender XDR

Purview

Entra Connect

SSO - SAML/OIDC

RBAC/PIM

PowerShell

Communication

AI tools awareness

Education

Bachelor's degree

Tools

Microsoft Graph PowerShell

Azure

Job description

GuidePoint Security LLC seeks a security-focused engineer to deliver hands-on Microsoft Cloud Security engagements. You will design identity architecture (Entra ID), set up hybrid sync, CA, MFA, RBAC, and governance.

You’ll implement SSO, SCIM provisioning, and Purview data protection while supporting Intune and Defender XDR across hybrid environments. The role centers on independent delivery (80% billable) and collaboration with architects, with a strong emphasis on security posture and