Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct hands-on Microsoft cloud security projects for clients, from small businesses to large enterprises.

• Create and deploy identity architectures utilizing Microsoft Entra ID and Active Directory.

• Execute hybrid synchronization, Conditional Access, MFA/passwordless authentication, and identity governance.

• Connect applications through SSO, SAML/OIDC, enterprise app registrations, and SCIM provisioning.

• Analyze and address identity risks using Entra ID Protection, sign-in logs, and audit logs.

• Enhance hybrid identity hygiene, including cleaning up stale objects, reducing privileged accounts, and implementing tiered administration.

• Design and deploy Microsoft Purview sensitivity labels, DLP, and retention policies within Microsoft 365.

• Assist with data classification, information protection rollouts, and data security posture assessments.

• Provide support for eDiscovery, Insider Risk Management, communication compliance, and DSPM for AI as necessary.

• Set up Intune device compliance, configuration profiles, and application deployments.

• Support Defender for Endpoint, Office 365, Identity, and Cloud Apps in both cloud and hybrid environments.

• Independently manage technical delivery aiming for an 80% billable target.

• Organize time and communication within assigned projects.

• Collaborate with architects and principal consultants across various industries and environments.

• Contribute to internal practice and knowledge-sharing initiatives between projects.

• Carry out additional duties as assigned while adhering to GuidePoint Security Core Values.

⛳️ Requirements

• 2–5 years of experience in IT administration, identity management, or security operations.

• Hands-on production experience with Microsoft Entra ID and on-premises Active Directory.

• Familiarity with Conditional Access, MFA, RBAC, and hybrid identity using Entra Connect.

• Knowledge of SAML, OAuth 2.0/OIDC, Kerberos, and LDAP authentication protocols.

• Experience with implementing Microsoft Purview, including sensitivity labels, DLP, retention, or eDiscovery.

• Experience in supporting Intune and Defender XDR.

• Basic PowerShell scripting skills for automation and reporting, including Microsoft Graph PowerShell.

• Strong troubleshooting abilities and attention to detail.

• Excellent written and verbal communication skills.

• Openness to adopting emerging technologies, including AI tools.

• Bachelor’s degree preferred (optional, not required).

🏝️ Benefits

• 100% remote work.

• Less than 10% travel for corporate events.

• Group Medical Insurance options, including Zero Deductible PPO and High Deductible Health Plan with HSA.

• GuidePoint covers 90% of employee PPO premiums and 70% of family PPO premiums.

• GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums.

• HSA contributions of $850 annually for individuals or $1,750 annually for families.

• Group Dental Insurance.

• GuidePoint pays 100% of employee dental premiums and 75% of family dental premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Mobile phone allowance.

• Home internet allowance.

• Eligibility for retirement plan after 2 months at open enrollment.

• Pet Benefit Option.

• Opportunities for collaboration, mentorship, and guidance.