Senior Security Engineer, Microsoft Stack

Southern New Hampshire University

Oregon

Hybrid

USD 107,000 - 171,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical insurance

Dental and vision

Paid time off

Tuition assistance

Retirement plan

Parental leave

Mental health resources

Job summary

Southern New Hampshire University is hiring a Senior Security Engineer to implement and operate Microsoft security platforms, protecting Azure, Microsoft 365, and hybrid infrastructure. The role emphasizes automation, policy enforcement, and secure configurations across Defender XDR, Entra ID, Intune, and Purview.

The engineer collaborates with IAM, Cloud Engineering, and Endpoint teams to reduce risk, automate controls, and ensure compliance with FERPA, GLBA Safeguards, and PCI DSS.

Qualifications

7+ years in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.
3+ years in the most recent Microsoft security platforms in an enterprise environment.
Bachelor's degree in information technology, computer science, information security or related discipline or equivalent years of experience acceptable.
Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100
Industry certifications: CISSP, CCSP, GIAC, or equivalent
Hands-on experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure
Infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline
Python or a second automation or scripting language
Microsoft Entra ID, Conditional Access.
Microsoft 365 and Azure security configuration and governance controls
Windows, Active Directory, networking fundamentals, certificates, and encryption
Logging and telemetry pipelines, detection engineering, and incident response practice
Zero Trust, least privilege, defense in depth, and risk-based decision-making
PowerShell at a production scripting level
Kusto Query Language for detection authoring and investigation
Microsoft Graph and REST API integration
Version control and change management discipline, including Git-based workflows
Clear technical writing for runbooks, standards, and control evidence

Responsibilities

Engineer and implement integrated security controls across Defender XDR, Entra ID Pro, App Governance, Intune, and Purview.
In partnership with IAM, engineer identity security controls in Entra ID, including CA, Identity Protection, PIM, and access reviews.
Build production-quality security automation using PowerShell, Graph, KQL, REST APIs; deploy configurations as code via Bicep or Terraform in CI/CD.
Integrate security telemetry with SNHU's SIEM, SOAR, ITSM, and threat intel platforms; troubleshoot cross-platform issues to permanent resolution.
Support partner-owned Microsoft platforms by supplying configuration expertise, review, and testing.
Document implementations as diagrams, runbooks, and evidence supporting audits and compliance.
Mentor engineers through configuration review and design feedback; no formal people management.
Other duties as assigned; changes may occur.

Skills

Cybersecurity

Cloud engineering

Identity security

Endpoint management

Infrastructure engineering

Programming

Scripting

PowerShell

Python

KQL

Graph API

REST API

IaC

CI/CD

Git workflows

Zero Trust

Education

Bachelor's degree in IT/CS

Tools

Microsoft Defender XDR

Intune

Azure

Purview

Microsoft Entra ID

PowerShell

Graph API

KQL

REST API

Bicep

Terraform

CI/CD pipelines

Git-based workflows

Job description

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us — and helped us grow a team that now serves over 180,000 learners worldwide.

Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we’re ready to expand our reach. All we need is you.

At SNHU, you'll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming.

We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states.

The opportunity

The Senior Security Engineer, Microsoft Stack will report to the Deputy Chief Information Security Officer. In this role, you will be a hands‑on engineering role accountable for implementing, operating, and continuously improving SNHU's Microsoft security platforms. The role is the primary technical owner of Microsoft Defender XDR and contributes Microsoft platform expertise to Defender for Cloud, Microsoft Entra ID, Intune, and Purview in partnership with the teams that own them.

The position exists to turn SNHU's security requirements and Zero Trust strategy into working, measurable controls protecting learners and employees across Azure, Microsoft 365, and hybrid infrastructure. The work divides roughly into driving use of Microsoft tools, automation that removes repetitive operational effort, and partnership with other teams on addressing security control gaps.

SNHU is a nonprofit university whose mission is to expand access to high-quality, affordable education. Protecting student records, financial aid systems, and the academic platforms our learners depend on is a direct contribution to that mission.

You will work 100% remotely from any of our approved states. #LI-Remote

What you'll do

Engineer and implement integrated security controls across Microsoft Defender XDR, Microsoft Entra ID Protection, App Governance, Intune, and Microsoft Purview Insider Risk Management, Data Loss Prevention, and Data Security Posture Management, using platforms to reduce identity, endpoint, application, cloud, and data risk through secure configuration, attack-surfacereduction, automated response, and continuous validation of control effectiveness.
In partnership with IAM, engineers identity security controls in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management, access reviews, workload identities, and hybrid identity protections. Test every policy change in a non-production tenant before promoting it to production.
Build production-quality security automation using PowerShell, Microsoft Graph, KQL, and REST APIs, and deploys repeatable configurations as code through Bicep or Terraform in CI/CD pipelines, to reduce manual effort, configuration drift, and time to remediate.
Integrate Microsoft security telemetry with SNHU's SIEM, SOAR, IT service management, and threat intelligence platforms; troubleshoots cross-platform issues through to permanent resolution; and serves as the security engineering point of contact with Microsoft, assessing roadmap changes, feature releases, and deprecations for their impact on SNHU controls.
Support partner-owned Microsoft platforms by supplying configuration expertise, review, and testing: Defender for Cloud and Azure Policy with Cloud Engineering, Intune baselines and attack surface reduction with Endpoint Engineering, and Purview sensitivity labels and data loss prevention with Data Security Posture Management (DSPM).
Document every implementation as diagrams, configuration standards, runbooks, test results, and as-built records, and provides control evidence supporting audit, control testing, and FERPA, GLBA Safeguards Rule, and PCI DSS compliance activities.
Mentors engineers through configuration review, pair troubleshooting, and design feedback, and escalates material control deficiencies to Security Architecture and leadership for prioritization. This role carries no formal people‑management responsibility.
Other duties and responsibilities as assigned. Job responsibilities can change at any time, with or without notice.

What we're looking for

7+ years of experience in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.
3+ year in the most recent Microsoft security platforms in an enterprise environment.
Bachelor's degree in information technology, computer science, information security or related discipline or equivalent years of experience acceptable.
Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100
Industry certifications: CISSP, CCSP, GIAC, or equivalent
Hands‑on experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure
Infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline
Python or a second automation or scripting language
Microsoft Entra ID, Conditional Access, and modern authentication protocols including OAuth 2.0, OpenID Connect, SAML, and Kerberos
Microsoft 365 and Azure security configuration and governance controls
Windows, Active Directory, networking fundamentals, certificates, and encryption
Logging and telemetry pipelines, detection engineering, and incident response practice
Zero Trust, least privilege, defense in depth, and risk-based decision-making
PowerShell at a production scripting level
Kusto Query Language for detection authoring and investigation
Microsoft Graph and REST API integration
Version control and change management discipline, including Git-based workflows
Clear technical writing for runbooks, standards, and control evidence

We believe real innovation comes from inclusion - where different experiences, perspectives and talents are celebrated.

If you have a disability and require a reasonable accommodation to fully engage in any part of the application or hiring process, please complete the
Accommodation Request form
or contact us at . A member from the Employee Accommodation Support Center will be in contact with you within two business days to discuss your request.

Compensation

The annual pay range for this position is $106,684.00 - $170,727.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $117,887.00 - $159,493.00.

Exceptional benefits (because you’re exceptional)