Senior IT Engineer – M365 Platform Protection, Data Governance

• Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment
• Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners
• Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations
• Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team
• Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities
• Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, One Drive, endpoints, and other supported Microsoft services
• Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration
• Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners
• Expand and operationalize Microsoft 365 E5 Defender, Purview, application governance, and data protection capabilities
• Translate security, compliance, legal, and business requirements into maintainable Microsoft 365 and Entra technical controls

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred)
• 8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies
• Proven hands-on experience with Microsoft 365 and Entra  an enterprise environment
• Hands-on experience with Microsoft Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365
• Experience with Microsoft Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management
• Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance
• Scripting and automation skills with Power Shell and Microsoft Graph API
• Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies
• Experience implementing technical controls based on security, compliance, audit, or regulatory requirements
• Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred

Demonstrates expertise in administering and optimizing Microsoft Defender technologies and Microsoft 365 environments, with a strong focus on security, compliance, and data protection. Proficient in implementing technical controls and governance capabilities while leveraging automation and scripting skills.

• Microsoft Defender XDR Administration
• Microsoft 365 Security Compliance
• Data Loss Prevention Implementation
• Power Shell Scripting
• Microsoft Purview Information Protection

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• Microsoft Defender for Office 365
• Data Lifecycle Management
• EDiscovery
• Audit Management
• SaaS Application Governance
• Microsoft Graph API Technical Control Implementation

• Microsoft Security Certification
• Microsoft Compliance Certification
• Microsoft Identity Certification

• IT Infrastructure
• Systems Engineering
• Enterprise Technologies
• Security Compliance
• Regulatory Requirements

• Microsoft 365
• Entra
• Microsoft Purview
• Exchange
• Teams
• Share Point
• One Drive