Senior Microsoft Security Cloud Engineer

Senior Microsoft Security Cloud Engineer

Position Summary:

The Senior Microsoft Cloud Security Engineer plays a key role in the University of Colorado's information security operations, focused on collaboratively securing the university's Microsoft cloud environment. This role includes managing Microsoft 365 security monitoring and incident response, administering and configuring Microsoft Purview for compliance and data governance, implementing security policies and controls across Microsoft 365 and Azure environments, and collaborating with campus IT and security teams to align Microsoft security practices with institutional goals.

Location: Remote within Colorado

Salary: $95,000 - $105,000

• Monitor and respond to alerts in Microsoft Defender XDR, Microsoft Sentinel, and related tools.
• Investigate security incidents and coordinate response and remediation activities.
• Tune alerting systems to reduce false positives and improve threat detection.
• Administer and configure security settings across Microsoft 365 and Azure AD.
• Collaborate with IAM and infrastructure teams to secure access and authentication configurations, including conditional access policies, MFA, and identity protection.
• Maintain secure configuration baselines for Microsoft cloud services.
• Configure and manage Microsoft Purview for data loss prevention (DLP), data classification, and compliance policies.
• Assist units in understanding and applying data governance and protection policies.
• Provide support for compliance assessments and data privacy reviews.
• Serve as a subject matter expert on Microsoft cloud security for other IT teams and campus stakeholders.
• Develop and maintain documentation of security policies, procedures, configurations, and standards.
• Support security awareness and training efforts related to cloud technologies.
• Work with campus IT and security teams to align Microsoft security practices with institutional goals.

Minimum Qualifications:

• Bachelor's degree from an accredited institution of higher education or equivalent professional experience (professional experience may be substituted on a year-for-year basis).
• Three (3) years of experience managing or securing Microsoft 365 or Azure environments.

Preferred Qualifications:

• Five (5) years of experience managing Microsoft 365 or Azure environments.
• Experience in information security operations activities.
• Experience managing Microsoft Defender, Sentinel, and/or Purview in an enterprise environment.
• Completion of certifications such as Microsoft SC-200, SC-300, AZ-500, or equivalent.
• Experience working in higher education or the public sector.
• Experience supporting compliance with GLBA, FERPA, HIPAA, or other regulatory frameworks.

• No-cost or low-cost medical & dental plan options, some inclusive of IVF assistance.
• Disability, Life, Vision Insurance options.
• Multiple retirement planning options including a mandatory 401(a) plan where CU contributes 10% of your gross pay, a 401k or 403b plan and a 457 deferred compensation plan.
• Pre-tax savings plans, such as Health care and Dependent care flexible spending accounts.
• Healthy work-life balance with ample sick and vacation leave, at least 12 paid holidays, and a dedicated week off for winter break.
• 6 weeks of parental leave.
• A tuition benefit program for you and/or your dependents.
• Free RTD Eco Pass and free onsite parking at our 1800 Grant Street Office.

CU is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws governing nondiscrimination in employment. We are committed to creating a workplace where all individuals are treated with respect and dignity, and we encourage individuals from all backgrounds to apply, including protected veterans and individuals with disabilities.