Sr IT Engineer - M365 Platform Protection & Data Governance

Supermicro; San Jose (CA); On-site; USD 140,000 - 155,000; Full time

Job summary

Supermicro is seeking a Sr IT Engineer focused on Microsoft 365 platform protection and data governance. You will administer Defender XDR across the 365 environment, and coordinate Defender for Endpoint/Identity, Purview, and Entra governance to strengthen security posture.

Responsibilities include implementing data loss prevention, information protection, and retention policies, while aligning with security, compliance, and business requirements across enterprise services.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field (preferred).
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Proven hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
• Hands-on experience with Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365.
• Experience with Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management.
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance.
• Scripting and automation skills with PowerShell and Microsoft Graph API.
• Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies.
• Experience implementing technical controls based on security, compliance, audit, or regulatory requirements.
• Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred.

Responsibilities

• Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment.
• Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners.
• Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations.
• Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team.
• Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities.
• Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other supported Microsoft services.
• Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration.
• Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners.

Skills

Strong IT infrastructure experience

Security governance

Cloud security

Identity and access management

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Defender XDR

Defender for Endpoint

Defender for Identity

Purview

Job description

About SupermicroSupermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Job Req ID: 30163

Job Summary Why This Role Matters:

• Maximize Microsoft 365 E5 Value: Expand and operationalize Defender, Purview, application governance, and data protection capabilities already available in the enterprise platform.
• Strengthen Preventive Platform Controls: Configure and optimize Microsoft protection and governance technologies from a systems-management perspective.
• Enable Cross-Team Governance: Translate security, compliance, legal, and business requirements into maintainable Microsoft 365 and Entra technical controls.

Essential Duties And Responsibilities What You'll Do: We are seeking a proactive Sr IT Engineer - M365 Platform Protection & Data Governance to support Microsoft 365 platform protection and data governance. The role focuses on technical administration, configuration, integration, and continuous improvement across Microsoft 365 and Entra services.

• Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment.
• Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners.
• Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations.
• Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team.
• Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities.
• Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other supported Microsoft services.
• Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration.
• Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners.

Qualifications Education & Experience:

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred).
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Proven hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
• Hands-on experience with Microsoft Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365.
• Experience with Microsoft Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management.
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance.
• Scripting and automation skills with PowerShell and Microsoft Graph API.
• Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies.
• Experience implementing technical controls based on security, compliance, audit, or regulatory requirements.
• Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred.

Salary Range $140,000 - $155,000 The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in this role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and equity award programs.

EEO Statement Supermicro is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of Supermicro to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.