Enterprise Security Engineer

We partner with clients to find, plan, and deliver solutions that generate revenue, streamline costs, and manage risk. We help our clients define actionable programs and strategies, implement solutions and effectively measure results. With nearly 10 years of operations, we are a mature business partner with multiple clients including start-up, mid-market and Fortune 100 companies. Our custom network of experts and tools helps ensure our client delivery and satisfaction are given the utmost attention, and the right team is deployed to the engagement.

With us, clients can scale their teams and accelerate initiatives using a flexible approach executed by our experienced team. we blend the structure and experiences of a Big 4 consulting company with the creativity and agility of a boutique firm. Our professionals are hands-on and provide key domain expertise and experiences that allow our clients to scale and maximize their investment.

Our program management is not reduced to tracking and reporting across initiatives, it’s planning and delivery expertise balanced with domain experience to ensure the right information is identified, elevated and managed.

We continuously engage with emerging technology companies and ventures to bring innovative solutions to our clients. Our focus on innovation helps us provide clients with a competitive edge to build for the future.

The Enterprise Security Engineer will develop and implement security policy standards across the organization, focusing on Azure and Microsoft 365 platforms. The ideal candidate should have extensive experience in identity and access management, threat detection, and security practices for Microsoft 365 workloads and Azure infrastructure.

Responsibilities

• Azure Infrastructure and Security
• Configure and manage Azure Security Center to monitor and address security threats.
• Implement network security controls, including Azure Firewall and network security groups.
• Implement best practices for managed identities, Azure Key Vault, and other security technologies.
• Manage Azure Virtual Desktop or Windows 365.
• Monitor Azure environments for suspicious activity using Azure Sentinel, Defender threat hunting, or an external MSSP/SOC.
• Microsoft 365 Security
• Manage user access and permissions within Microsoft 365, including Exchange, SharePoint, and Teams.
• Detect and respond to identity-based threats using Microsoft Defender for Identity.
• Implement data loss prevention (DLP) policies and sensitivity labels to protect information.
• Monitor Microsoft 365 environments for suspicious activity using Microsoft Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity.
• Perform eDiscovery searches and content holds across Microsoft 365 data.
• Implement and manage Purview Insider Risk Management.

Other Responsibilities and Duties

• Document ports, protocols, and applications across enterprise networks (physical and cloud-based).
• Conduct periodic user and service principal audits.
• Develop organizational security standards and policies in alignment with NIST 800-171/CMMC 2.0.
• Perform other assigned duties.

Key Skills and Knowledge

• Deep understanding of Azure and Microsoft 365 security features, services, and best practices.
• Expertise in identity and access management (IAM) concepts, including Entra Conditional Access policies.
• Proficiency in security incident and event management (SIEM) tools, preferably with external SOC/MSSP/SEIM experience.
• Knowledge of network security principles and threat detection techniques, including Secure Access Service Edge products.
• Familiarity with compliance frameworks and regulations (NIST 800-171, CMMC 2.0).

Requirements

• Bachelor's degree in computer science, MIS, or a cybersecurity-related field, or a minimum of 5 years equivalent industry experience.

Relevant certifications preferred:

• CISSP
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft 365 Administrator Expert certifications
• Experience with ISO frameworks (900x, 2000x, 2700x) preferred.

Daily and punctual attendance required:

• Remote work coordination across multiple time zones.
• Prepared and on time for all scheduled meetings.