Microsoft 365 Engineer

We are seeking a Microsoft 365 security and compliance expert with deep hands-on experience in Microsoft Defender, Microsoft Purview, and the Microsoft 365 Admin Center. You will design, implement, and optimize security and compliance capabilities across Microsoft 365, translating risk and regulatory requirements into enforceable technical controls. This role requires strong analytical skills, disciplined execution, and the ability to operate as both a technical authority and a pragmatic advisor to IT and security stakeholders.

• Own and optimize Microsoft 365 tenant administration via the Microsoft 365 Admin Center across core workloads (Exchange, SharePoint, OneDrive, Teams, and related admin portals).
• Manage user and group lifecycle operations, licensing strategy, service health monitoring, and incident communication.
• Define and maintain tenant-wide configuration standards, governance guardrails, and administrative operating procedures.
• Oversee administrative roles and access models (least privilege), including role assignment reviews and privileged access controls where applicable.
• Drive service readiness and change management: feature releases, Message Center review, impact analysis, stakeholder communications, and rollout planning.
• Troubleshoot Microsoft 365 service issues using service health telemetry, audit logs, and diagnostic tooling; coordinate with Microsoft support as needed.
• Produce high-quality documentation: tenant configuration baselines, runbooks, operational playbooks, and escalation procedures.

• Architect, deploy, and optimize Microsoft Defender solutions, including policy and control baselining.
• Implement and tune Defender security controls such as endpoint protection, identity protection, email and collaboration protection, and cloud app security monitoring (as applicable).
• Develop detection and response use-cases, triage workflows, alert tuning, and incident response playbooks.
• Conduct root-cause analysis of security incidents and drive remediation and hardening measures.
• Integrate Defender telemetry with SIEM/SOAR (e.g., Microsoft Sentinel) and standardize operational reporting (KPIs/KRIs).

• Design and deploy information protection and compliance capabilities (e.g., sensitivity labeling, encryption, DLP, retention).
• Implement data governance and lifecycle management aligned to business and legal requirements.
• Configure and maintain compliance policies for Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams).
• Support eDiscovery, audit, insider risk and information barrier use-cases (where applicable).
• Ensure controls are measurable, auditable, and aligned with relevant frameworks (e.g., ISO 27001, NIST, GDPR).

• Translate business risk and regulatory requirements into technical designs, implementation plans, and operational controls.
• Lead or support migrations and security uplift initiatives, ensuring minimal disruption and strong change management.
• Provide 3rd line support and act as escalation point for complex Microsoft 365 security/compliance and tenant administration issues.
• Coach and upskill internal teams; define standards and guardrails for secure-by-default configurations.