About this role
We are seeking a highly skilled and results-driven senior Microsoft Security Engineer to join our technical delivery team. The ideal candidate will be a hands-on subject matter expert in Microsoft's security ecosystem, with a strong focus on implementing, configuring, and supporting cloud security and data governance solutions within Azure, Entra, the Microsoft Defender suite, and Microsoft Purview. This role is primarily focused on technical execution—turning architectural designs into secure, compliant, and operational customer environments Key Responsibilities Implementation & Configuration: Deploy, configure, and maintain core Microsoft security technologies, including Azure Networking Security components (Azure Firewall, NSGs, Azure WAF) and Entra ID services (Conditional Access, PIM, Entra Private Access). Execute the onboarding and fine-tuning of the Microsoft Defender suite (e.g., Defender for Endpoint, Defender for Cloud, Defender for Office 365) across customer environments. Implement and manage Microsoft Sentinel for security information and event management (SIEM), including connector deployment, playbook automation, and custom rule creation. Data Governance & Compliance: Implement and configure Microsoft Purview capabilities, including Data Loss Prevention (DLP) policies, Information Protection (sensitivity labels, encryption), and records management features. Configure eDiscovery, communication compliance, and audit log settings within Purview to meet regulatory and data protection requirements (e.g., GDPR, ISO 27001). Define and apply data classification schemes and retention policies across various data sources using Purview tools. Endpoint & Identity Management: Implement and manage Microsoft Intune policies for endpoint security, compliance, and device configuration. Configure advanced Identity and Access Management (IAM) solutions within Entra ID , focusing on least privilege principles and identity governance. Operational Support & Documentation: Perform security hardening and ensure operational compliance through the implementation of Azure Policy, and resource locks. Produce clear, detailed, and up-to-date technical runbooks, configuration guides, and "as-built" documentation for all implemented security and compliance solutions.