Senior Microsoft Security and Compliance Engineer

About the role

A company is looking for a Senior Microsoft Security/Compliance Engineer to support its global cloud cybersecurity and compliance strategy. The role is an engineering and architectural position behind the Microsoft security and governance roadmap, securing a multi-cloud ecosystem, managing enterprise risk and advising leadership. It suits a cybersecurity engineer who wants to move beyond manual spreadsheets to build modern, automated cloud governance.

Key responsibilities

• Review, optimize and maintain Microsoft Entra ID, Microsoft Intune and Microsoft Defender configurations
• Define security and device compliance policies aligned with HIPAA and SOC 2 requirements
• Evaluate the environment so Microsoft security tools are deployed effectively and follow best practices
• Build and maintain Power BI dashboards showing identity risks, endpoint security posture and MDM compliance, and serve as the reporting partner to the Compliance Manager
• Use Microsoft connectors to aggregate data from Defender, Intune and Entra ID into centralized reports
• Bridge Security/Compliance and IT Operations by defining remediation workflows for non-compliant devices or risky sign-ins and guiding Helpdesk staff

Required profile

• 3+ years in IT Security, Systems Administration or Cloud Security focused on the Microsoft ecosystem
• Proven experience configuring and managing Microsoft Entra ID, Intune and Defender
• Ability to design Conditional Access policies, device compliance profiles and EDR configurations
• Experience in environments where security sets the policy and IT executes the fix, with strong communication skills
• Familiarity with HIPAA and SOC 2 and mapping Microsoft controls to them
• Relevant Microsoft certifications such as MS-500, SC-200, SC-300 or SC-400

Required skills

• Mandatory Power BI dashboard building using native Microsoft data connectors
• Custom KQL queries in Defender and Microsoft Graph API queries
• Microsoft Entra ID, Intune, Defender and Conditional Access