Senior Security Engineer, Microsoft Stack (Remote)

Southern New Hampshire University; Oregon; Hybrid; USD 107,000 - 171,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision

Paid time off

Tuition assistance

Retirement plan

Parental leave

Mental health resources

Job summary

Southern New Hampshire University is hiring a Senior Security Engineer to implement and operate Microsoft security platforms, protecting Azure, Microsoft 365, and hybrid infrastructure. The role emphasizes automation, policy enforcement, and secure configurations across Defender XDR, Entra ID, Intune, and Purview.

The engineer collaborates with IAM, Cloud Engineering, and Endpoint teams to reduce risk, automate controls, and ensure compliance with FERPA, GLBA Safeguards, and PCI DSS.

Qualifications

• 7+ years in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.
• 3+ years in the most recent Microsoft security platforms in an enterprise environment.
• Bachelor's degree in information technology, computer science, information security or related discipline or equivalent years of experience acceptable.
• Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100
• Industry certifications: CISSP, CCSP, GIAC, or equivalent
• Hands-on experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure
• Infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline
• Python or a second automation or scripting language
• Microsoft Entra ID, Conditional Access.
• Microsoft 365 and Azure security configuration and governance controls
• Windows, Active Directory, networking fundamentals, certificates, and encryption
• Logging and telemetry pipelines, detection engineering, and incident response practice
• Zero Trust, least privilege, defense in depth, and risk-based decision-making
• PowerShell at a production scripting level
• Kusto Query Language for detection authoring and investigation
• Microsoft Graph and REST API integration
• Version control and change management discipline, including Git-based workflows
• Clear technical writing for runbooks, standards, and control evidence

Responsibilities

• Engineer and implement integrated security controls across Defender XDR, Entra ID Pro, App Governance, Intune, and Purview.
• In partnership with IAM, engineer identity security controls in Entra ID, including CA, Identity Protection, PIM, and access reviews.
• Build production-quality security automation using PowerShell, Graph, KQL, REST APIs; deploy configurations as code via Bicep or Terraform in CI/CD.
• Integrate security telemetry with SNHU's SIEM, SOAR, ITSM, and threat intel platforms; troubleshoot cross-platform issues to permanent resolution.
• Support partner-owned Microsoft platforms by supplying configuration expertise, review, and testing.
• Document implementations as diagrams, runbooks, and evidence supporting audits and compliance.
• Mentor engineers through configuration review and design feedback; no formal people management.
• Other duties as assigned; changes may occur.

Skills

Cybersecurity

Cloud engineering

Identity security

Endpoint management

Infrastructure engineering

Programming

Scripting

PowerShell

Python

KQL

Graph API

REST API

IaC

CI/CD

Git workflows

Zero Trust

Education

Bachelor's degree in IT/CS

Tools

Microsoft Defender XDR

Intune

Azure

Purview

Microsoft Entra ID

PowerShell

Graph API

KQL

REST API

Bicep

Terraform

CI/CD pipelines

Git-based workflows

Job description

Southern New Hampshire University is hiring a Senior Security Engineer to implement and operate Microsoft security platforms, protecting Azure, Microsoft 365, and hybrid infrastructure. The role emphasizes automation, policy enforcement, and secure configurations across Defender XDR, Entra ID, Intune, and Purview.

The engineer collaborates with IAM, Cloud Engineering, and Endpoint teams to reduce risk, automate controls, and ensure compliance with FERPA, GLBA Safeguards, and PCI DSS.