Senior M365 Platform Engineer: Governance & Security Lead

Prisma Health UC by Wellstreet, LLC; Atlanta (GA); On-site; USD 140,000 - 180,000; Full time

Job summary

WellStreet Urgent Care seeks a seasoned M365 security and identity engineer to own the Microsoft 365 platform. You’ll design and enforce governance across Entra ID, Intune, Exchange Online, Teams and Purview, with a strong emphasis on HIPAA/HITRUST controls and secure application access.

You’ll work toward API‑driven, version‑controlled management using Graph, PowerShell, and declarative tooling, while balancing security with usability for clinical workflows.

Qualifications

• Five or more years in M365, identity or security engineering, with tenant-level depth in Entra ID and Intune.
• Real Purview configuration experience: writing DLP policies, labeling, retention, eDiscovery.
• Microsoft Graph and PowerShell fluency. Automation against the API. Python is a plus.
• Version control is where your work lives, with branches and pull requests.
• Experience with a regulated framework (HIPAA, HITRUST, SOC 2 or PCI) and ability to explain controls.
• Use of AI daily with clear sense of what to trust and where to review.

Responsibilities

• Entra ID: tenant architecture, Conditional Access, hybrid identity, privileged access, password protection and SSPR, access reviews.
• Intune: tenant configuration across Windows, macOS, iOS and Android; compliance and configuration profiles, security baselines, Autopilot, update rings, app packaging.
• Exchange Online, Teams and SharePoint: tenant configuration, mail flow, transport rules.
• Purview: DLP, sensitivity labeling, retention, audit configuration, eDiscovery, HIPAA and HITRUST control mapping.
• Enterprise Applications: SSO and SCIM across the portfolio; no app touching PHI runs on standalone credentials.
• Defender: EDR on devices, Defender for Office 365 anti-phishing and threat investigation, unified alert view across M365 estate; Defender for Servers, Cloud, Identity.
• Vulnerability response: CVE triage from SecOps, remediation tracking, weekly report.
• The application portfolio: an accurate catalog, runbooks that work, vendors held to SLAs and BAAs.

Skills

Microsoft 365

Entra ID

Intune

Microsoft Graph

PowerShell

Python

Version control

Tools

Terraform

Bicep

Azure DevOps

Microsoft365DSC

Graph Tenant Configuration Management APIs

Job description

WellStreet Urgent Care seeks a seasoned M365 security and identity engineer to own the Microsoft 365 platform. You’ll design and enforce governance across Entra ID, Intune, Exchange Online, Teams and Purview, with a strong emphasis on HIPAA/HITRUST controls and secure application access.

You’ll work toward API‑driven, version‑controlled management using Graph, PowerShell, and declarative tooling, while balancing security with usability for clinical workflows.