M365 Security and Compliance Administrator

At 4A Consulting, we turn complexity into opportunity. Founded in 2014 and headquartered in Baltimore, MD, we are a women-owned, boutique consulting firm specializing in delivering innovative, data-driven solutions to both the Federal Government and Fortune 500 clients. Our team blends deep industry knowledge with advanced technologies to design tailored strategies that drive measurable and sustainable outcomes. We pride ourselves on an agile, collaborative approach that helps organizations navigate challenges and seize emerging opportunities in a rapidly evolving digital landscape.

At 4A, we don’t just deliver projects, we build trusted partnerships that empower our clients to lead with confidence in the digital age.

We are seeking a Senior M365 Security and Compliance Administrator to manage and enhance the security and compliance posture of a Microsoft 365 environment within a Government Community Cloud (GCC) tenant. The ideal candidate will have strong expertise across Microsoft 365 security, Microsoft Purview, Exchange Online, Entra , Conditional Access, Intune, Microsoft Defender, Microsoft Sentinel, and Azure.

This role will serve as a senior engineering resource across the organization’s device, identity, endpoint, and M365 security ecosystem. The successful candidate will provide hands-on technical leadership, respond to vulnerabilities and operational risks, support compliance and audit activities, and drive continuous improvements to the overall security posture.

• Lead the development, implementation, and management of Microsoft 365 security policies, standards, and technical guardrails
  .
• Manage Microsoft Purview capabilities, including data classification, sensitivity labeling, retention, and Data Loss Prevention (DLP).
• Define and enforce Exchange Online email security policies, including encryption, sensitivity labeling, and secure mail flow.
• Implement and maintain email encryption solutions such as S/MIME and Microsoft Information Protection
  .
• Administer and monitor anti-spam, anti-phishing, and anti-malware protections.
• Design and manage Entra l Access policies based on device compliance across Windows, macOS, and mobile platforms.
• Investigate and remediate Conditional Access failures, identity anomalies, and external or guest access issues.
• Design, test, and deploy Microsoft Intune configuration and compliance policies across Windows, macOS, and iOS/iPadOS.
• Develop Power Shell remediation scripts and configuration profiles to address compliance gaps and enforce security baselines.
• Coordinate vulnerability mitigation efforts, vendor fixes, security baseline updates, and endpoint security improvements.
• Establish and manage security risk processes across the Microsoft 365 environment, including ATO and compliance control assessments
  .
• Develop implementation statements, collect compliance artifacts, and provide evidence for audits and security assessments.
• Lead the integration and operational management of Microsoft Defender and Microsoft Sentinel for threat detection, alerting, and response.
• Build and maintain SIEM integrations and telemetry pipelines for Microsoft 365, identity, collaboration, and third-party systems.
• Develop log ingestion solutions using Azure Function Apps and other Azure services.
• Tune audit retention, analytic rules, and alert logic to improve security monitoring and investigation readiness.
• Provide Tier 3 troubleshooting for device compliance, identity and access, telemetry, and endpoint security issues.
• Collaborate with cybersecurity, operations, enterprise architecture, identity, and other cross-functional teams to resolve security and operational issues.
• Provide technical leadership during security reviews, operational meetings,…