Senior M365 Security & Compliance Engineer (GCC)

ETHOS - Talent & Advisory; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

ETHOS - Talent & Advisory seeks a senior security engineer to own the security and compliance posture of a Microsoft 365 GCC environment supporting a federal agency. You will protect Windows, macOS, and iOS/iPadOS endpoints, keep access to M365 services compliant and reliable, and lead fast engineering responses to vulnerabilities, outages, and risk.

You will lead Defender/Sentinel integration, build SIEM pipelines, write PowerShell remediation scripts, and coordinate enterprise rollout of

Qualifications

• Bachelor's degree or 8+ years of related experience.
• Hands-on Defender XDR, Endpoint, and Cloud Apps experience.
• Cross-platform return telemetry with Sentinel and SIEM.
• Expert-level Intune engineering across Windows, macOS and iOS/iPadOS.
• Advanced PowerShell for remediation and automation.
• Strong Conditional Access architecture and Entra ID integration.
• Experience producing ATO evidence and audit support.
• Ability to communicate complex issues clearly during high-severity events.

Responsibilities

• Engineer, test, and deploy Intune policies across Windows/macOS/iOS, incl. Enrollment Status Pages and OOBE workflows.
• Design and validate device-based Conditional Access in Entra ID; troubleshoot CAP and identity issues.
• Lead integration and tuning of Defender and Microsoft Sentinel with rules and connectors.
• Build SIEM ingestion pipelines for third-party logs using Azure Function Apps and Log Analytics.
• Write PowerShell remediation scripts to close compliance gaps and enforce baselines.
• Own data protection governance in Purview: classification, labeling, retention, and DLP.
• Secure Exchange Online mail flow and anti-malware protections; manage encryption.
• Support ATO/control assessments by drafting implementation statements and assembling evidence packages.
• Provide Tier 3 support on device compliance, identity, telemetry, and app protection incidents; coordinate rollouts.
• Partner with Cyber, Ops, EA, ICAM, and Comms; keep Jira/Confluence and change requests current.

Skills

Intune engineering

PowerShell

Microsoft Defender

Microsoft Sentinel

SIEM

Entra ID

Azure Function Apps

Log Analytics

Conditional Access

Compliance governance

Education

Bachelor's degree

12+ years experience in lieu of degree

Tools

Jamf

Okta connectors

Copilot audit logging

Microsoft Graph API

Job description

ETHOS - Talent & Advisory seeks a senior security engineer to own the security and compliance posture of a Microsoft 365 GCC environment supporting a federal agency. You will protect Windows, macOS, and iOS/iPadOS endpoints, keep access to M365 services compliant and reliable, and lead fast engineering responses to vulnerabilities, outages, and risk.

You will lead Defender/Sentinel integration, build SIEM pipelines, write PowerShell remediation scripts, and coordinate enterprise rollout of