Senior Azure​/Microsoft 365 Security Engineer

Senior Azure / Microsoft 365 Security Engineer

Location: Charlotte, NC, US, 28277 York, PA, US, 17405

Company: Dentsply Sirona, Inc

Dentsply Sirona is the world’s largest manufacturer of professional dental products and technologies, with a 130-year history of innovation and service to the dental industry and patients worldwide. Dentsply Sirona develops, manufactures, and markets a comprehensive solutions offering including dental and oral health products as well as other consumable medical devices under a strong portfolio of world class brands. Dentsply Sirona’s products provide innovative, high-quality and effective solutions to advance patient care and deliver better and safer dentistry.

Dentsply Sirona’s global headquarters is located in Charlotte, North Carolina. The company’s shares are listed in the United States on NASDAQ under the symbol XRAY.

Bringing out the best in people

As advanced as dentistry is today, we are dedicated to making it even better. Our people have a passion for innovation and are committed to applying it to improve dental care. We live and breathe high performance, working as one global team, bringing out the best in each other for the benefit of dental patients, and the professionals who serve them.

If you want to grow and develop as a part of a team that is shaping an industry, then we’re looking for the best to join us.

Working at Dentsply Sirona you are able to:

Develop faster - with our commitment to the best professional development.

Perform better - as part of a high-performance, empowering culture.

Shape an industry - with a market leader that continues to drive innovation.

Make a difference -by helping improve oral health worldwide.

The Senior Azure / Microsoft 365 Security Engineer is a senior individual contributor within the Security Architecture and Engineering organization. This role serves as a technical authority and execution lead for securing Dentsply Sirona’s Azure and Microsoft 365 platforms, partnering closely with Cloud Engineering, Identity, Workplace Technology, and Security Operations teams.

This role owns the design, engineering, and continuous improvement of security controls across Azure and Microsoft 365, including identity protection, workload and network security, email and collaboration protection, data protection, and security monitoring integrations. The Senior Engineer is expected to operate with minimal direction, lead complex initiatives end‑to‑end, and act as a trusted advisor to both technical and security leadership.

This role also provides senior‑level support to Security Operations by ensuring high‑quality telemetry, detection coverage, and automation alignment across the Microsoft ecosystem.

This is a hybrid role that will require you to be based out of our Charlotte, NC, York,PA or Waltham, MA office.

• Owning Azure and Microsoft 365 security architecture patterns and engineering standards.
• Leading implementation and optimization of Microsoft security platforms (Defender, Purview, Entra , Intune).
• Acting as a senior escalation point for complex cloud and identity security issues.
• Driving security posture improvement, risk reduction, and operational maturity across Microsoft platforms.

• Design and maintain secure Azure landing zone and subscription patterns, including management groups, policy enforcement, network segmentation, and secure service exposure.
• Define and enforce identity and access architecture using Microsoft Entra  (Azure AD), RBAC, Conditional Access, Privileged Identity Management (PIM), and managed identities.
• Establish and maintain Zero Trust‑aligned controls across Azure and Microsoft 365 workloads.
• Lead the design, deployment, and tuning of Microsoft Defender capabilities, including:
  • Defender for Cloud
  • Defender for Endpoint
  • Defender for Identity
  • Defender for Office 365
  • Defender for Cloud Apps
• Own secure configuration baselines, posture management, and remediation workflows aligned to Microsoft Secure Score and internal risk priorities.
• Partner with Sec Ops to reduce alert fatigue, improve signal‑to‑noise ratio, and enhance incident response workflows.