Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct hands-on Microsoft cloud security engagements for clients, from small businesses to large enterprises.

• Design and implement identity architecture, hybrid synchronization, Conditional Access, MFA/passwordless authentication, and identity governance.

• Integrate applications using SSO, SAML/OIDC, enterprise app registrations, and SCIM provisioning.

• Investigate and address identity risks utilizing Entra ID Protection, sign-in logs, and audit logs.

• Enhance hybrid identity hygiene through stale object cleanup, reduction of privileged accounts, and tiered administration.

• Design and implement Microsoft Purview sensitivity labels, DLP, and retention policies across Microsoft 365.

• Support data classification, information protection rollouts, data security posture assessments, eDiscovery, Insider Risk Management, communication compliance, and AI data security readiness.

• Configure Intune device compliance, configuration profiles, and application deployments across various platforms.

• Support Defender for Endpoint, Office 365, Identity, and Cloud Apps in both cloud and hybrid environments.

• Independently manage technical delivery aiming for an 80% billable target.

• Oversee time management and communication within assigned engagements.

• Collaborate with architects and principal consultants across diverse industries and environments.

• Contribute to internal practice and knowledge-sharing initiatives between different projects.

• Uphold GuidePoint Security Core Values.

• Perform additional duties as required.

⛳️ Requirements

• Bachelor’s degree preferred.

• 2–5 years of experience in IT administration, identity management, or security operations.

• Hands-on production experience with Microsoft Entra ID and on-premises Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).

• Knowledge of SAML, OAuth 2.0/OIDC, Kerberos, and LDAP.

• Experience implementing Microsoft Purview, including sensitivity labels, DLP, retention, or eDiscovery.

• Comfort in supporting Intune and Defender XDR.

• Basic PowerShell scripting skills for automation and reporting, such as Microsoft Graph PowerShell.

• Strong troubleshooting abilities and attention to detail.

• Excellent written and verbal communication skills.

• Willingness to adopt emerging technologies, including AI tools.

• Advanced experience with AD, Microsoft Sentinel, Azure infrastructure and security, SharePoint Online governance, Teams Voice, Power BI/Fabric, or Copilot Studio/Azure AI Foundry is preferred.

🏝️ Benefits

• Primarily remote workforce (U.S. based only).

• Group Medical Insurance options, including Zero Deductible PPO and High Deductible Health Plan with HSA.

• GuidePoint covers 90% of employee PPO premiums and 70% of family PPO premiums.

• GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums.

• Annual HSA contributions of $850 for employees or $1,750 for families.

• Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Healthy mobile phone and home internet allowance.

• Eligibility for retirement plan after 2 months during open enrollment.

• Pet Benefit Option.

• Opportunities for collaboration, mentorship, and guidance.

• Less than 10% travel required for corporate events.