Senior AI/M365 Security & Identity Governance Engineer

AIS (Applied Information Sciences); United States; Remote; USD 117,000 - 177,000; Full time

Job summary

AIS is seeking a Lead Software Engineer with deep Microsoft cloud security and identity engineering experience to support a federal client. You will design and implement Entra ID, CA, RBAC, and lifecycle controls, and establish security patterns for Azure AI Foundry, AVD, and M365 workloads.

You will contribute to Azure Policy, private networking, logging, and monitoring, collaborating with Purview and compliance teams to govern data.

Qualifications

• 6+ years in Microsoft cloud security or identity engineering.
• Hands-on expertise with Entra ID, Conditional Access, RBAC, PIM, Azure Policy, and secure Azure networking.
• Experience implementing Microsoft Purview, M365 security, or data-protection controls.
• Working knowledge of NIST-based controls and regulated-environment delivery.
• Ability to balance secure design with practical adoption and delivery outcomes.

Responsibilities

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls.
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads.
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements.
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls.
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders.
• Develop clear security standards and operational procedures that delivery and O&M teams can execute.

Skills

Microsoft cloud security

Identity engineering

Entra ID

Conditional Access

RBAC

PIM

Azure Policy

Azure networking

Data protection controls

NIST controls

Job description

AIS is seeking a Lead Software Engineer with deep Microsoft cloud security and identity engineering experience to support a federal client. You will design and implement Entra ID, CA, RBAC, and lifecycle controls, and establish security patterns for Azure AI Foundry, AVD, and M365 workloads.

You will contribute to Azure Policy, private networking, logging, and monitoring, collaborating with Purview and compliance teams to govern data.