Senior Cyber Security Microsoft Ecosystem Engineer

Title: Senior Cyber Security Microsoft Ecosystem Engineer - Remote

Location:  United States

Job Description:

Work Type: Remote, Full Time

Job ID: JR-104898

This position is fully remote.

Overview

We're seeking a highly skilled Senior Security Engineer with deep knowledge and expertise in Microsoft technologies, policies, and licensing, to lead the design, implementation, and management of enterprise-grade security solutions. This role is critical to ensuring the confidentiality, integrity, and availability of our Microsoft-based infrastructure. This includes Microsoft Office 365, Purview, Azure, Intune, and Windows endpoints.

You'll work with cross-functional teams (Infrastructure, IAM, GRC, cloud architects, Enterprise Privacy and Compliance teams, Communications) to proactively identify risks, implement controls, and respond to evolving threats.

Primary Responsibilities:

• Design, recommend, implement and troubleshoot security controls across Microsoft 365, Purview, DSPM, Azure, Intune, EDR/Defender suite, Power Platform and Windows Server environments
• Review and recommend security policies using Microsoft Entra ID, Conditional Access, Purview, DSPM, Defender suite, and Power Platform
• Review current security controls and architectures and make recommendations for control replacements using Microsoft's ecosystem for on-prem, hybrid, and cloud environments
• Design, implement, and enforce sensitivity labels, encryption, data retention, and DLP policies across M365 ecosystem
• Design and maintain end-to-end architecture integrations between security tools and adjacent platforms (CASB, SOAR, SIEM, ServiceNow, CMDB, email gateways, and threat intel platforms)
• Monitor and analyze security logs to support incident response, forensics, and investigation activities
• Monitor and optimize system health, connector fidelity, data quality, and agent deployment success across thousands of assets
• Work with cross functional teams to perform threat modeling, vulnerability assessments, and incident response for Microsoft platforms
• Collaborate with compliance teams to meet regulatory requirements (e.g., NIST, ISO 27001, HIPAA) and support audit activities and deliverables
• Support maturity modeling, executive dashboards, and architectural blueprints to track progress across tooling ecosystems
• Develop and maintain operational documentation and reports to support monthly trend analysis as well as project components
• Lead implementation and deployment efforts across the enterprise involving technical and leadership teams
• Provide technical mentorship and training to engineers and contribute to security architecture and infrastructure reviews
• Stay current with industry trends Microsoft's evolving security landscape and align technical and process improvement recommendations with organizational goals

Education

• 5+ years of relevant experience with a degree (Required)
• 7+ years of relevant experience without a degree (Required)

Certification/Licensure

• No specific certification or licensure requirements

Experience

Required:

• 5+ years of experience in cybersecurity, with a focus on Microsoft technologies and licensing
• Deep knowledge of Microsoft 365 security features, Purview, DSPM, Azure, Intune, and Defender suite
• Experience with PowerShell scripting and automation for security tasks
• Familiarity with Zero Trust architecture and identity-based access controls
• Strong understanding of data security, threat detection, incident response, and vulnerability management
• Excellent communication and documentation skills

Preferred:

• Microsoft Certified: Cybersecurity Architect Expert or equivalent
• Experience with Microsoft Sentinel, Purview, and compliance center tools
• Experience in hybrid cloud environments and enterprise-scale deployments
• Experience with healthcare or regulated industry environments (HIPAA, HICP, NIST).
• Familiarity with architectural review boards, solution design documentation, and capability roadmaps.

Talroo-IT

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $126,152.00 - $198,161.60 annually.

Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down - $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance-accessible emergency room that is supported by board-certified physicians. Sentara Independence houses state-of-the-art medical equipment and highly-skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.