M365 Security & Identity Engineer

A client in the PNW is looking for a M365 Security & Identity Engineer to join their team! This is a direct hire position that is 3 days onsite and 2 days remote. The technology stack you will be working with includes but is not limited to: Microsoft 365 tenant security and identity stack: Microsoft Entra Suite: Entra ID, Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, and PowerShell/Microsoft Graph. We are looking for someone with strong with Identity and Access, Threat Protection, Security Operations, Data Security, M365 Security, and Automation Security experience. Additionally in this role you will apply zero trust principles to devices, data, and ai workloads including M365 copilot and agents.

· 5+ years of Microsoft 365, identity, and/or security engineering experience. · 3+ years of experience with Microsoft Entra ID hands-on engineering with in a production enterprise tenant, including Conditional Access, PIM, and identity governance. · 3+ years of experience with Microsoft Defender XDR Hands-on experience deploying and operating workloads (Endpoint, Office 365, Identity, Cloud Apps). · 3+ years of experience with Microsoft Sentinel, SIEM experience: including data connectors, analytics rules, and automation, with strong KQL skills. · 3+ years of experience with Microsoft Purview, implementing Information Protection, DLP, and retention policies. · Experience with Microsoft Intune device compliance and configuration management. · Strong understanding of Enterprise Security Operations: Zero Trust principles, authentication protocols (OAuth 2.0, OpenID Connect, SAML), and hybrid identity (Entra Connect / Cloud Sync). · Experience supporting production systems with on-call participation, incident follow-through, and root cause analysis. Proficiency in scripting (PowerShell, Microsoft Graph).