Senior IT Engineer – M365 Platform Protection, Data Governance

Jobtailor; San Jose (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced IT security professional to administer and optimize Microsoft Defender XDR and related Microsoft 365 protections. The role focuses on integrating Defender for Endpoint, Identity, Cloud Apps, and Office 365 within an enterprise environment, while advancing governance and data protection controls.

Responsibilities include policy implementation, DLP, eDiscovery, retention, and automated labeling across Exchange, Teams, SharePoint, and OneDrive, with emphasis on

Qualifications

• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
• Certifications in Microsoft security, compliance, identity, or related areas preferred.

Responsibilities

• Administer and optimize Defender XDR platform configuration and integrations across Microsoft 365 environment.
• Manage configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365.
• Implement preventive platform controls, posture improvements, and cross-product protection integrations.
• Administer SaaS and cloud application governance, including OAuth permissions, app registrations, and service principals.

Skills

PowerShell scripting

Security governance

Microsoft 365 Defender

Identity and access security

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft 365 Defender suite

Entra ID

Microsoft Purview

Microsoft Graph API

Job description

• Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment
• Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners
• Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations
• Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team
• Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities
• Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other supported Microsoft services
• Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration
• Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners
• Expand and operationalize Microsoft 365 E5 Defender, Purview, application governance, and data protection capabilities
• Translate security, compliance, legal, and business requirements into maintainable Microsoft 365 and Entra technical controls

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred)
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies
• Proven hands-on experience with Microsoft 365 and Entra ID in an enterprise environment
• Hands-on experience with Microsoft Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365
• Experience with Microsoft Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance
• Scripting and automation skills with PowerShell and Microsoft Graph API
• Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies
• Experience implementing technical controls based on security, compliance, audit, or regulatory requirements
• Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred

Core Competencies

Demonstrates expertise in administering and optimizing Microsoft Defender technologies and Microsoft 365 environments, with a strong focus on security, compliance, and data protection. Proficient in implementing technical controls and governance capabilities while leveraging automation and scripting skills.

Highest-signal resume keywords

• Microsoft Defender XDR Administration
• Microsoft 365 Security Compliance
• Data Loss Prevention Implementation
• PowerShell Scripting
• Microsoft Purview Information Protection

Hard Skills

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• Microsoft Defender for Office 365
• Data Lifecycle Management
• EDiscovery
• Audit Management
• SaaS Application Governance
• Microsoft Graph APITechnical Control Implementation

Certifications & Qualifications

• Microsoft Security Certification
• Microsoft Compliance Certification
• Microsoft Identity Certification

Industry Keywords

• IT Infrastructure
• Systems Engineering
• Enterprise Technologies
• Security Compliance
• Regulatory Requirements

Tools & Technologies

• Microsoft 365
• Entra ID
• Microsoft Purview
• Exchange
• Teams
• SharePoint
• OneDrive