Microsoft Security Engineer

GuidePoint Security is seeking a hands-on Microsoft Security Engineer to strengthen our Microsoft Cloud Security offerings, with a focus on Entra ID, Purview, Intune, and Defender XDR. This role is remote and targets an 80 percent billable engagement mix, with limited travel as needed to support client engagements.

Responsibilities

• Identity & Access (Entra ID / AD): Design and implement identity architecture for Entra ID and on‑premises AD, including hybrid sync via Entra Connect, Conditional Access, MFA/passwordless, and identity governance (PIM, RBAC, access reviews, entitlement management).
• SSO and provisioning: Enable application integration through SAML/OIDC, manage enterprise app registrations, and SCIM provisioning.
• Identity risk and hygiene: Investigate and remediate identity risks using Entra ID Protection, review sign‑in and audit logs, and drive hybrid identity hygiene (stale object cleanup, privileged account reduction, tiered admin models).
• Data Security & Compliance (Purview): Design and implement sensitivity labels, DLP, and retention policies across Microsoft 365; support data classification, information protection rollouts, and data security posture assessments.
• eDiscovery and AI readiness: Support eDiscovery, Insider Risk Management, communication compliance, and AI data security readiness (DSPM for AI) as engagements require.
• Intune & Defender XDR: Configure device compliance, configuration profiles, and app deployments across platforms; support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.
• Other duties: Perform additional responsibilities as assigned and uphold GuidePoint Security core values.

Requirements

• Bachelor's degree preferred.
• 2–5 years of experience in IT administration, identity management, or security operations.
• Hands‑on production experience with Microsoft Entra ID and on‑premises Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).
• Knowledge of core authentication protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP.
• Experience implementing Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery) and comfort supporting Intune and Defender XDR.
• Basic PowerShell scripting for automation and reporting (e.g., Microsoft Graph PowerShell).
• Strong troubleshooting skills, attention to detail, and clear written and verbal communication.
• Openness to emerging technologies, including AI tools, to improve efficiency and outcomes.

Technologies

• Microsoft Entra ID, Active Directory
• Conditional Access, RBAC, PIM
• SAML, OAuth 2.0, OIDC, Kerberos, LDAP
• SCIM, Entra ID Protection
• Purview, DLP, eDiscovery
• Intune, Defender XDR, Defender for Endpoint
• Office 365, Microsoft Graph PowerShell, PowerShell
• Azure Policy, Azure, SharePoint Online, Teams, Power BI
• Fabric, Copilot Studio, Azure AI Foundry, Entra Connect
• Microsoft 365, DSPM

Benefits

• Remote workforce primarily; United States based, with some travel可能 for specific roles; on‑site work may be required for Federal positions.
• Group Medical Insurance options:
  • Zero Deductible PPO Plan with GuidePoint paying 90% of employee premiums and 70% for family plans.
  • High Deductible Health Plan with HSA where GuidePoint pays 100% of employee premiums and 75% for family plans; quarterly contributions apply ($850 per employee annually / $1,750 per family annually).
• Group Dental Insurance: GuidePoint covers 100% of employee premiums and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off program.
• Allowance for mobile phone and home internet.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet benefit option.

Travel Requirements

• This role is remote with less than 10% travel for corporate events.

Physical Requirements

• Sedentary work.
• Substantial movement of wrists, hands, or fingers for up to 8 hours daily.
• Close visual acuity for computer work and extensive reading for up to 8 hours daily.