Microsoft Security Engineer- Remote (Anywhere in the U.S.)

Role overview Hands-on security engineering role focused on Microsoft cloud security for client engagements. The engineer delivers identity, data protection, and endpoint security implementations across organizations ranging from small businesses to large enterprises, owning technical delivery independently with a billable utilization target.

Responsibilities - Design and implement identity architecture using Microsoft Entra ID and hybrid sync, including Conditional Access, MFA, passwordless, PIM, RBAC, and access reviews. - Integrate applications via SSO (SAML and OIDC), enterprise app registrations, and SCIM provisioning. - Investigate and remediate identity risks using Entra ID Protection and audit logs, and enforce tiered admin models with privileged account reduction. - Deploy Microsoft Purview capabilities including sensitivity labels, data loss prevention, and retention policies across Microsoft 365. - Configure Intune device compliance, configuration profiles, and app deployments across platforms. - Support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.

Requirements - Two to five years in IT administration, identity management, or security operations. - Hands-on production experience with Microsoft Entra ID and on-premises Active Directory. - Working knowledge of SAML, OAuth 2.0 and OIDC, Kerberos, and LDAP. - Experience implementing Microsoft Purview and supporting Intune and Defender XDR. - Basic PowerShell scripting for automation and reporting, including Microsoft Graph PowerShell. - Strong troubleshooting skills and clear written and verbal communication.

Nice to have - Advanced Active Directory work such as multi-domain and multi-forest design, migrations, and legacy authentication cleanup. - Microsoft Sentinel experience with log onboarding, detection development, or broader SIEM and SOAR exposure. - Azure infrastructure and security including Azure Policy, network security, landing zones, and RBAC. - SharePoint Online governance, Teams Voice, Power BI and Fabric, or Copilot Studio experience.

Benefits and work setup - Fully remote within the U.S., with less than ten percent travel for corporate events. - Group medical and dental insurance options. - Twelve corporate holidays plus a flexible time off program. - Mobile phone and home internet allowance. - Retirement plan eligibility after two months and a pet benefit option.