M365 Security and Compliance Administrator

Job Summary

The role is focused on strengthening the security and compliance posture of an M365 GCC environment, including endpoint, identity, email, data protection, SIEM, and security operations. M365 Security and Compliance Ad…

Qualification

• Bachelor's degree with 8+ years of relevant experience; 4 additional years of experience may substitute for the degree
• Must be a able to obtain a Public Trust Level 5 clearance
• Deep experience with Microsoft Defender , including XDR, Endpoint, and Cloud Apps
• Hands-on experience with Microsoft Sentinel SIEM
• Strong experience with cross-platform security telemetry and ingestion pipelines
• Expert-level Microsoft Intune engineering across Windows, macOS, iOS, and iPadOS
• Advanced PowerShell experience for remediation, automation, and OS image manipulation
• Strong understanding of Entra ID, Conditional Access, and identity risk enforcement
• Experience with Microsoft 365 security and compliance within a GCC/Government Community Cloud environment
• Strong experience with Microsoft Purview , including DLP, data classification, labeling, and retention
• Strong Exchange Online security and compliance experience
• Experience with email encryption, sensitivity labeling, secure mail flow, anti-spam, anti-phishing, and anti-malware controls
• Experience designing and managing Intune configuration and compliance policies
• Experience with Enrollment Status Pages (ESP) and OOBE workflows
• Experience developing remediation scripts and enforcing security baselines
• Experience with ATO control evidence, compliance mapping, and audit support
• Experience with Microsoft Defender and Microsoft Sentinel integration and operational management
• Strong troubleshooting experience across device compliance, identity/access, security telemetry, and endpoint protection
• Excellent communication, documentation, collaboration, and problem-solving skills

Preferred Experience:

• Federal security, high-compliance, or high-assurance environments
• Jamf
• Okta connectors
• Microsoft Graph API
• Copilot audit logging
• macOS security hardening and mSCP baseline engineering
• Enterprise-wide Conditional Access enforcement
• Azure Function Apps and Log Analytics
• Experience supporting security operations across Cyber, Operations, Enterprise Architecture, ICAM, and Communications teams

Platform/Technology Environment:

• Microsoft 365 GCC
• Microsoft Purview
• Exchange Online
• Microsoft Entra ID
• Conditional Access
• Microsoft Intune
• Microsoft Defender
• Microsoft Sentinel
• Azure Function Apps
• Azure Log Analytics
• PowerShell
• Graph API