Senior Microsoft Security Engineer - Defender & Purview

Capitol Careers LLC; Washington (District of Columbia); Hybrid; USD 150,000 - 200,000; Full time

Job summary

Capitol Careers LLC in Washington, DC is seeking a Lead Microsoft Security Engineer to drive enterprise Microsoft security deployments, focusing on Defender for Endpoint, Defender for Servers, Defender for Cloud Apps, and Purview data protection.

The role blends hands-on engineering with technical leadership, including policy design, implementation, and coordinating across security, infrastructure, and business teams, with required onsite presence in DC once per week.

Qualifications

• Strong hands-on experience implementing and managing security capabilities within the Microsoft security ecosystem.
• Experience with Defender for Endpoint, Defender for Servers, and Defender for Cloud Apps.
• Experience configuring Intune and Windows Autopilot.
• Working knowledge of MDM, MAM, device compliance, and Conditional Access.
• Hands-on experience with Microsoft Purview, including DLP, sensitivity labels, retention policies, and data protection controls.
• Demonstrated experience applying Zero Trust principles to enterprise security implementations.
• Ability to troubleshoot policy and integration issues across hybrid environments.
• Strong technical documentation, stakeholder communication, and cross-functional leadership skills.
• Ability to work onsite in Washington, DC once per week.
• Requires an Active Secret or Top-Secret Security Clearance.

Responsibilities

• Lead implementation and ongoing management of Defender for Endpoint, Defender for Servers, and Defender for Cloud Apps.
• Assess configurations and identify opportunities to improve protection within the Microsoft G5 ecosystem.
• Configure and validate security policies, integrations, and workflows across hybrid environments.
• Troubleshoot implementation issues and coordinate remediation with infrastructure and security teams.
• Develop implementation plans, configuration documentation, and operational handoff materials.
• Implement and optimize Microsoft Intune for device management and security policy enforcement.
• Establish device compliance policies and continuous monitoring processes to identify and address noncompliant endpoints.
• Automate repeatable provisioning, configuration, and remediation activities.
• Test deployment changes and validate that security controls operate effectively without unnecessary disruption to users.
• Design and test BYOD programs and Conditional Access policies; coordinate pilot deployments.
• Work with identity and endpoint teams to maintain consistent protection across managed and personal devices.

Skills

Leadership

Security engineering

Cross-functional collaboration

Documentation

Tools

Microsoft Defender for Endpoint

Defender for Servers

Defender for Cloud Apps

Microsoft Intune

Windows Autopilot

MDM

MAM

Microsoft Purview

DLP

Sensitivity labels

Retention policies

Conditional Access

Job description

Capitol Careers LLC in Washington, DC is seeking a Lead Microsoft Security Engineer to drive enterprise Microsoft security deployments, focusing on Defender for Endpoint, Defender for Servers, Defender for Cloud Apps, and Purview data protection.

The role blends hands-on engineering with technical leadership, including policy design, implementation, and coordinating across security, infrastructure, and business teams, with required onsite presence in DC once per week.