Description

Architect and operate Microsoft 365 security for an enterprise of 10,000+ users. Own the security roadmap, tenant configuration, and incident response. Partner with Cybersecurity, Legal, and Compliance to enforce Zero Trust principles across identity, devices, and data.

This role is on-site.

Responsibilities

• Design and maintain security controls for Exchange Online, Intune, OneDrive, and Teams.
• Configure Conditional Access, Identity Protection, and External Collaboration policies.
• Manage Microsoft Purview, DLP, Sensitivity Labels, and DRM/ADRMS implementations.
• Lead threat detection, investigation, and automated response workflows.
• Influence cross-functional teams to translate policy into technical controls.

Required Skills

• 5+ years of hands-on experience with the Microsoft 365 security ecosystem.
• Deep expertise in Microsoft Defender, Microsoft Purview, and Email DLP.
• Strong knowledge of Conditional Access, DRM, and ADRMS.
• Understanding of Zero Trust architecture, messaging security, and data governance.
• Experience in large, multinational enterprises (10,000+ users).
• Ability to lead dotted-line teams and manage stakeholder relationships.
• Bachelor's degree in Computer Science or related field.

Preferred Skills

• Microsoft Security certifications (SC-100, SC-200, SC-300, SC-400).
• Experience with M&A integrations and multi-cloud environments (Azure, AWS, GCP).
• Familiarity with NIST, ISO, SOC, and GDPR compliance frameworks.

Key Skills

Education

Bachelor's degree