M365 Platform and Security Engineer

About Us

We are an award-winning California-based environmental consulting firm with 550+ professionals and more than 30 years of diverse experience serving clients in transportation, energy, water, infrastructure, private development, and government sectors. Our mission is to deliver practical, science-based environmental and planning solutions that support communities, infrastructure, and natural systems.

As a people-centric organization, we value collaboration, fairness, and transparency, and are committed to fostering a workplace that supports both personal and professional growth while offering robust career opportunities. We are especially proud of our recent Great Place To Work® certification, which reflects an independent assessment of our culture and our team member experiences.

Rincon Consultants, Inc. is seeking a Microsoft 365 Platform and Security Engineer to own and operate the Microsoft 365 E5 control plane. This role is responsible for administering identity, endpoint, collaboration, and data protection platforms; establishing enforceable governance standards; and enabling AI capabilities securely and responsibly.

This position plays a critical role in reducing organizational risk, standardizing Microsoft tenant configuration, improving operational maturity, and decreasing reliance on managed service providers for core Microsoft platform administration.

This role may offer a hybrid work setup, blending time in the office with remote work as business needs evolve. We enjoy coming together in person to collaborate, connect with teammates, and partner with clients. We may prioritize candidates who live within 50 miles of a Rincon office. Eligible office locations for this role include Carlsbad, Fresno, Los Angeles, Monterey, Oakland, Palm Springs, Riverside, Sacramento, San Luis Obispo, San Diego, San Jose, Santa Barbara, and Ventura.

This position is also open to candidates outside of California.

Microsoft Platform Administration

• Administer and maintain Microsoft Entra , Intune, Microsoft Defender, Microsoft Purview, SharePoint, Teams, and related Microsoft 365 services.
• Own baseline Microsoft Fabric control plane configuration and coordination in partnership with data and enablement teams.
• Ensure consistent, secure configuration across Microsoft E5 services.
• Manage tenant configuration, platform changes, testing, and documentation to support operational stability and scalability.

Security & Governance

• Design, implement, and enforce identity, device, access, collaboration, and data protection controls.
• Establish governance standards that protect organizational data while minimizing user friction.
• Configure and maintain controls such as Conditional Access, MFA, Privileged Identity Management (PIM), device compliance policies, sensitivity labels, Data Loss Prevention (DLP), retention policies, and sharing boundaries.
• Partner with IT Operations, Security, and Enablement teams to ensure controls are practical, supportable, and adopted.

AI Enablement

• Enable AI safely by implementing appropriate sensitivity labels, Data Loss Prevention (DLP) policies, retention controls, and sharing and access boundaries.
• Assess and remediate oversharing, permissions, and content exposure risks that could affect AI-enabled experiences.
• Ensure AI capabilities operate within approved governance, compliance, and access models.

Platform Standards & Improvement

• Develop tenant-wide standards that reduce support tickets and improve automation and self-service.
• Improve overall Microsoft E5 security posture without introducing excessive operational burden.
• Document platform standards, configurations, runbooks, and support procedures to support consistency and scalability.
• Recommend and implement improvements that strengthen governance, security, usability, and long‑term maintainability of the Microsoft environment.

Vendor & MSP Coordination

• Serve as the internal administrator for Microsoft tenant configuration in collaboration with MSP partners.
• Coordinate with MSPs and specialty vendors for overflow or specialized platform work as needed.
• Reduce long‑term dependency on external…