Senior Security Engineer, Microsoft Stack

This is a fully remote position, open to applicants in Alabama, +31 more states.

📋 Description

• Implement, manage, and continuously enhance SNHU's Microsoft security platforms.

• Act as the main technical owner of Microsoft Defender XDR.

• Provide Microsoft platform insights for Defender for Cloud, Microsoft Entra ID, Intune, and Purview.

• Design and integrate security controls across Defender XDR, Entra ID Protection, App Governance, Intune, and Purview.

• Mitigate risks related to identity, endpoints, applications, cloud, and data through secure configurations, attack-surface reduction, automated responses, and ongoing validation.

• Develop identity security controls such as Conditional Access, Identity Protection, Privileged Identity Management, access reviews, workload identities, and hybrid identity protections.

• Test policy alterations in a non-production environment prior to production deployment.

• Create security automation using PowerShell, Microsoft Graph, KQL, and REST APIs.

• Deploy reusable configurations as code utilizing Bicep or Terraform within CI/CD pipelines.

• Integrate Microsoft security telemetry with SIEM, SOAR, IT service management, and threat intelligence platforms.

• Resolve cross-platform issues with permanent solutions.

• Act as the security engineering liaison with Microsoft, evaluating roadmap changes, feature releases, and deprecations.

• Provide configuration expertise for partner-owned Microsoft platforms through review and testing.

• Document implementations with diagrams, configuration standards, runbooks, test results, and as-built records.

• Supply control evidence for audits, control testing, and compliance activities related to FERPA, GLBA Safeguards Rule, and PCI DSS.

• Mentor engineers through configuration reviews, paired troubleshooting, and design feedback.

• Report significant control deficiencies to Security Architecture and leadership.

• Perform additional duties and responsibilities as assigned.

⛳️ Requirements

• 7+ years of experience in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.

• 3+ years of recent experience with Microsoft security platforms in an enterprise setting.

• Bachelor's degree in information technology, computer science, information security, or a related field, or equivalent years of experience will be accepted.

• Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100.

• Industry certifications: CISSP, CCSP, GIAC, or equivalent.

• Practical experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure.

• Experience with infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline.

• Proficiency in Python or another automation or scripting language.

• Knowledge of Microsoft Entra ID, Conditional Access, and modern authentication protocols including OAuth 2.0, OpenID Connect, SAML, and Kerberos.

• Familiarity with Microsoft 365 and Azure security configuration and governance controls.

• Understanding of Windows, Active Directory, networking fundamentals, certificates, and encryption.

• Experience with logging and telemetry pipelines, detection engineering, and incident response practices.

• Knowledge of Zero Trust, least privilege, defense in depth, and risk-based decision-making.

• Proficiency in PowerShell at a production scripting level.

• Experience with Kusto Query Language for detection authoring and investigation.

• Familiarity with Microsoft Graph and REST API integration.

• Knowledge of version control and change management disciplines, including Git-based workflows.

• Excellent technical writing skills for runbooks, standards, and control evidence.

• Must reside in and work from one of the approved states.

🏝️ Benefits

• High-quality, low-deductible medical insurance.

• Low to no-cost dental and vision plans.

• 5 weeks of paid time off.

• Almost a dozen paid holidays.

• Employer-funded retirement.

• Free tuition program.

• Parental leave.

• Mental health and wellbeing resources.

• Remote work from an approved state.

• Reliable internet connection and dedicated, properly equipped workspace for remote employees.