Microsoft Security Implementation Engineer
Description
We are looking for experienced Microsoft Security Implementation Engineers (8-12 years) to design, implement, configure, and optimize Microsoft security solutions across enterprise environments. The ideal candidate will possess strong hands-on expertise in Microsoft Entra ID, Microsoft Defender, Microsoft Intune, and Microsoft Purview, along with experience in enterprise security deployments, client requirement assessment, solution design, and Microsoft security licensing.
This is a hands-on, implementation-focused role, requiring the ability to independently deliver security solutions rather than primarily manage security operations or monitor alerts. Candidates with broader experience will be expected to demonstrate greater ownership of solution architecture, technical consulting, and end-to-end project delivery.
The core responsibilities for the job include the following:
Microsoft Security Implementation and Configuration:
- Design, deploy, configure, and manage Microsoft security solutions across enterprise environments.
- Translate client business, technical, and compliance requirements into appropriate security solutions.
- Implement and optimize security controls across Microsoft 365, Azure, identity, endpoint, and data security environments.
- Perform security assessments, identify configuration gaps, and recommend remediation measures.
Core Microsoft Security Technologies:
- Hands-on implementation experience across multiple technologies:
- Microsoft Entra ID: Conditional Access, MFA, PIM, Identity Protection, RBAC, SSO, Identity Governance.
- Microsoft Defender: Defender for Endpoint, Office 365, Identity, Cloud Apps, Defender XDR, and Defender for Cloud.
- Microsoft Intune: Endpoint Management, Device Compliance, Security Policies, Configuration Profiles, Autopilot, MDM/MAM.
- Microsoft Purview: Data Loss Prevention (DLP), Sensitivity Labels, Information Protection, Insider Risk, eDiscovery, Compliance.
Security Architecture, Licensing, and Optimization:
- Evaluate security requirements and recommend suitable Microsoft security solutions.
- Assess Microsoft licensing requirements, feature availability, dependencies, and cost-effective licensing options.
- Configure security policies, alerts, detection rules, integrations, dashboards, and security baselines.
- Perform security posture assessments, troubleshooting, root-cause analysis, and remediation.
- Support security migrations, integrations, and modernization initiatives.
Client Engagement and Project Delivery:
- Participate in or lead client workshops, technical discussions, and requirement-gathering sessions.
- Own implementation activities from solution planning through deployment, testing, validation, and handover.
- Conduct proof-of-concept (PoC), user acceptance testing (UAT), and implementation validation.
- Prepare solution design documents, implementation plans, SOPs, configuration guides, and technical assessments.
- Collaborate with customers, internal engineering teams, and third-party vendors to deliver successful implementations.
Requirements:
- 8-12 years of relevant experience in Microsoft Security, Microsoft 365 Security, Azure Security, or enterprise cybersecurity implementations.
- Proven hands-on experience deploying and configuring Microsoft security solutions in enterprise environments.
- Strong implementation expertise in at least two or three of the following: Entra ID, Defender, Intune, and Purview, with working knowledge of the others.
- Good understanding of Microsoft security architecture, identity security, endpoint protection, threat protection, and data security.
- Knowledge of Microsoft security licensing, including Microsoft 365 E3/E5, Entra, Defender, Intune, and Purview licensing considerations.
- Experience assessing customer requirements and recommending appropriate security solutions.
- Strong troubleshooting, technical documentation, and problem-solving capabilities.
- Experience in enterprise implementations, technical consulting, or customer-facing project delivery.
- Strong solution architecture and implementation leadership experience.
- Ability to own complex, multi-product Microsoft security transformation projects.
- Expertise in security assessments, licensing recommendations, integration strategies, and technical consulting.
- Ability to guide engineering teams and engage directly with enterprise stakeholders.
Nice-to-Have:
- Microsoft certifications such as SC-100, SC-200, SC-300, SC-401, SC-500, MD-102, or MS-102.
- Experience implementing Microsoft security solutions for multiple enterprise clients.
- Experience with security migrations, cloud security transformation, and Zero Trust architecture.
- Familiarity with security frameworks such as NIST, CIS, and ISO 27001.
- Knowledge of PowerShell, Microsoft Graph API, Microsoft Sentinel, or security automation.
Ideal Candidate Profile:
- We are looking for hands-on Microsoft Security Implementation Engineers, not candidates whose experience is limited to SOC monitoring, incident triage, or routine IT administration.
- Understanding enterprise security requirements and recommending appropriate Microsoft solutions.
- Independently configuring, deploying, integrating, and validating Microsoft security controls.
- Demonstrating strong practical expertise across multiple Microsoft security products.
- Understanding Microsoft licensing and recommending suitable options.
- Owning implementation deliverables and working directly with clients and technical stakeholders.