Microsoft 365 Security & Compliance Engineer

Summary
We are seeking an experienced Microsoft 365 Security & Compliance Engineer to lead the protection and governance of our digital environment. In this pivotal role, you will be responsible for architecting, implementing, and maintaining robust security frameworks that safeguard sensitive data while ensuring adherence to global regulatory standards. Your expertise will drive the evolution of our security posture, aligning our Microsoft 365 ecosystem with the latest roadmap features and industry best practices to mitigate risks and enhance operational resilience.

Responsibilities

• Design and execute advanced PowerShell scripts to automate administrative tasks, generate comprehensive security reports, and streamline operational workflows.
  
• Manage the end-to-end lifecycle of Microsoft 365 security controls, including the creation, monitoring, and updating of security policies.
  
• Ensure organizational alignment with security standards and regulatory compliance mandates through continuous auditing and policy enforcement.
  
• Evaluate and assess the impact of new Microsoft 365 features and roadmap updates on existing security architectures.
  
• Implement Microsoft Purview Information Protection strategies, focusing on the configuration of sensitivity labels, encryption protocols, and auto-labeling mechanisms.
  
• Architect, fine-tune, and monitor Data Loss Prevention (DLP) policies, conducting thorough incident reviews to resolve potential data breaches.
  
• Configure and manage Microsoft Entra ID (formerly Azure AD) identity solutions, specifically optimizing Conditional Access policies to secure user access.
  

Requirements

Requirements:

• Minimum of 6 to 9 years of professional experience in IT services, with a strong focus on Microsoft 365 security and compliance.
  
• Proven proficiency in PowerShell administration, particularly for reporting and automation within the Microsoft ecosystem.
  
• Deep understanding of Microsoft 365 security controls and the ability to manage policy lifecycles effectively.
  
• Solid knowledge of security standards, regulatory frameworks, and compliance requirements relevant to the IT industry.
  
• Experience in assessing Microsoft 365 roadmaps to identify and implement relevant feature enhancements.
  
• Expertise in Microsoft Purview Information Protection, including the setup of sensitivity labels, encryption, and auto-labeling rules.
  
• Hands-on experience in designing, tuning, and reviewing Data Loss Prevention (DLP) policies and incident response procedures.
  
• Strong command of Microsoft Entra ID and Conditional Access policy configuration to ensure secure identity management.