Senior Microsoft 365 Platform Engineer | HIPAA-Governed IT

Four Winds Health; Atlanta (GA); On-site; USD 140,000 - 170,000; Full time

Job summary

WellStreet Urgent Care is seeking an experienced engineer to own the Microsoft 365 platform, enforcing HIPAA governance through Entra ID, Intune, Purview, and Defender across the estate.

You’ll design taxonomy, implement SSO/SCIM, automate with Graph/PowerShell, and drive a code-based approach to management with version control and API-driven workflows. Five+ years in M365/security is required.

Qualifications

• 5+ years in M365/identity or security engineering with tenant-level depth in Entra ID and Intune.
• Real Purview configuration experience: writing DLP policies, labeling, retention, eDiscovery.
• Microsoft Graph and PowerShell fluency; Python a plus; automation by default.

Responsibilities

• Design and implement Entra ID tenant architecture, CA, hybrid identity and privileged access controls.
• Configure Intune across Windows, macOS, iOS, Android; enforce security baselines and Autopilot workflows.
• Manage Exchange Online, Teams and SharePoint configurations; mail flow and transport rules.
• Oversee Purview DLP, labeling, retention, audit config, eDiscovery; HIPAA/HITRUST control mapping.
• Coordinate SSO/SCIM across apps; ensure no PHI app uses standalone credentials.
• Oversee Defender suite and workload security across devices and servers; triage vulnerabilities.
• Maintain accurate application catalog and runbooks; ensure vendor SLAs/BAAs are met.

Skills

M365

Entra ID

Intune

Purview

Microsoft Graph

PowerShell

Python

Tools

Terraform

Azure DevOps

Microsoft365DSC

Terraform M365 provider

Graph Tenant Configuration Management APIs

Job description

WellStreet Urgent Care is seeking an experienced engineer to own the Microsoft 365 platform, enforcing HIPAA governance through Entra ID, Intune, Purview, and Defender across the estate.

You’ll design taxonomy, implement SSO/SCIM, automate with Graph/PowerShell, and drive a code-based approach to management with version control and API-driven workflows. Five+ years in M365/security is required.