Senior Microsoft Cloud Security Architect

NML Medical; Lower Providence Township (PA); On-site; USD 140,000 - 190,000; Full time

Job summary

Globus Medical seeks a Senior Information Security Engineer focused on Microsoft security, identity protection, and cloud threat detection to design, implement, and operate security controls across Microsoft 365, Entra, Azure, Intune, Defender, and Purview. You will lead complex investigations, develop detections, strengthen privileged-access controls, and integrate telemetry with CrowdStrike and Rapid7.

You will establish playbooks, support post-incident remediation, mentor analysts, and report

Qualifications

• Bachelor’s degree in Information Security, or related field.
• Microsoft Certified: Azure Security Engineer Associate or equivalent certifications or hands-on work.

Responsibilities

• Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices.
• Lead identity and Microsoft 365 security monitoring, investigation, and incident response, including identity compromise, suspicious authentication activity, phishing, token/session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration across Exchange Online, SharePoint, OneDrive, Teams, and connected services.
• Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations with platforms such as CrowdStrike and Rapid7.
• Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service/workload identities, authentication methods, access reviews, and Privileged Identity Management.
• Implement and operationalize Microsoft Purview data-security capabilities, including Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk to support data protection and security investigations.
• Develop and maintain incident-response playbooks and containment procedures, conduct post-incident reviews, preserve investigative evidence, and track remediation activities through accountable owners and target dates.
• Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation activities, with clearly defined internal and vendor responsibilities.
• Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning to balance security improvement with business continuity.
• Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies.
• Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role.

Skills

SIEM

EDR

SOAR

Vulnerability management

Python

PowerShell

Bash

Zero Trust

Identity protection

M365 security

Education

Bachelor's degree in Information Security or related field

Tools

Microsoft Defender

CrowdStrike Falcon

Rapid7

KQL

Job description

Globus Medical seeks a Senior Information Security Engineer focused on Microsoft security, identity protection, and cloud threat detection to design, implement, and operate security controls across Microsoft 365, Entra, Azure, Intune, Defender, and Purview. You will lead complex investigations, develop detections, strengthen privileged-access controls, and integrate telemetry with CrowdStrike and Rapid7.

You will establish playbooks, support post-incident remediation, mentor analysts, and report