Sr IT Engineer - M365 Platform Protection & Data Governance

Supermicro; Wayne (CA); On-site; USD 140,000 - 155,000; Full time

Job summary

Supermicro is seeking a Sr IT Engineer to lead Microsoft 365 platform protection and data governance across the enterprise. You will implement Defender XDR configurations, integrate Defender components, and coordinate with cross-functional teams to enforce security policies.

The role requires deep expertise in Microsoft 365 security, Purview data protection, and Entra governance, with strong scripting and automation skills.

Qualifications

• Bachelor's degree or higher in a related field is preferred.
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
• Hands-on experience with Microsoft Defender technologies (XDR, Endpoint, Identity, Cloud Apps, Office 365).
• Experience with Purview capabilities (Information Protection, sensitivity labels, DLP, retention, eDiscovery).
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, and SaaS governance.
• Scripting and automation with PowerShell and Microsoft Graph API.
• Knowledge of identity, endpoint, data protection, access control, and encryption technologies.

Responsibilities

• Administer Defender XDR platform configuration and integrations across the Microsoft 365 environment.
• Manage Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 configurations with platform owners.
• Implement preventive platform controls, baselines, and cross-product protection integrations.
• Administer SaaS and cloud application governance, including OAuth permissions, app registrations, and service principals.
• Administer Purview Information Protection, including sensitivity labels, encryption, classifiers, and automated labeling.
• Design and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other services.
• Configure retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery settings.
• Review Secure Score and coordinate remediation with service owners.

Skills

M365 Platform Protection

PowerShell scripting

Graph API automation

Security and governance experience

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Microsoft Defender XDR

Defender for Endpoint

Defender for Identity

Defender for Cloud Apps

Defender for Office 365

Purview Information Protection

Entra ID

DLP & Data Lifecycle Management

Job description

About Supermicro

Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Job Summary

Why This Role Matters:

• Maximize Microsoft 365 E5 Value: Expand and operationalize Defender, Purview, application governance, and data protection capabilities already available in the enterprise platform.
• Strengthen Preventive Platform Controls: Configure and optimize Microsoft protection and governance technologies from a systems-management perspective.
• Enable Cross-Team Governance: Translate security, compliance, legal, and business requirements into maintainable Microsoft 365 and Entra technical controls.

Essential Duties and Responsibilities

What You'll Do:

We are seeking a proactive Sr IT Engineer - M365 Platform Protection & Data Governance to support Microsoft 365 platform protection and data governance. The role focuses on technical administration, configuration, integration, and continuous improvement across Microsoft 365 and Entra services.

• Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment.
• Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners.
• Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations.
• Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team.
• Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities.
• Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other supported Microsoft services.
• Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration.
• Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners.

Qualifications

Education & Experience:

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred).
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Proven hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
• Hands-on experience with Microsoft Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365.
• Experience with Microsoft Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management.
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance.
• Scripting and automation skills with PowerShell and Microsoft Graph API.
• Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies.
• Experience implementing technical controls based on security, compliance, audit, or regulatory requirements.
• Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred.

Salary Range

$140,000 - $155,000

The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in this role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and equity award programs.

EEO Statement

Supermicro is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of Supermicro to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.