Microsoft Identity and Security Engineer

Perform Microsoft 365 and Entra ID security reviews and deliver prioritized remediation plans.

Design and implement Conditional Access, MFA, Privileged Identity Management, and least privileged role assignments.

Deploy and operate Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps) and respond to alerts and incidents.

Implement Purview data protection, sensitivity labels, DLP, and retention policies.

Manage Windows endpoints with Intune and LAPS.

Design, harden, and support Active Directory and hybrid identity (Entra Connect, Cloud Sync).

Plan and execute Microsoft 365 tenant migrations and consolidations.

Build and roll out email authentication (SPF, DKIM, DMARC) and communicate changes to customers.

Onboard and support M365 workloads on P1 Protect and participate in disaster recovery planning and work sessions.

Automate repeatable tasks and reporting with PowerShell and Microsoft Graph.

Configure access using a least privileged approach, audit, and ensure adherence to policies and procedures.

Communicate upgrade and rollback plans and execute upgrades.

Maintain an internal wiki with technical documentation, manuals and IT policies.

Communicate with clients, understand their needs and build trust.

Project Examples:

Run a Microsoft 365 security review for a customer, present findings, then implement Conditional Access, PIM, and Defender across the tenant.

Migrate a customer from one M365 tenant to another with minimal disruption to mail, Teams, and SharePoint.

Build a DMARC rollout plan, move a customer from monitoring to enforcement, and keep their third party senders working.

Harden a customer’s Active Directory and set up hybrid identity with Entra ID.

An engineer who lives in Entra ID and Microsoft 365 security and is passionate about learning and capable of providing outstanding customer service. You will work directly with a variety of customers to assess, harden, and operate their Microsoft identity and security environments, from Conditional Access and PIM to Defender and Purview. Identity and security is the core of this role, but we’re a small team and you’ll be exposed to everything we do. You’ll also have the opportunity to work on P1 Protect, our data protection service, where protecting M365 is a big part of the job., Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)

Microsoft Purview (sensitivity labels, DLP, retention)

Intune and LAPS

Active Directory and hybrid identity (Entra Connect)

Exchange Online, SharePoint, Teams administration

PowerShell and Microsoft Graph

Windows

AI dev/coding agents

Experience as a Microsoft 365 / Systems Administrator

Tier 2 Technical Skills (multiple required):

Data Protection (Backup/Recovery) Software (Keepit, Cohesity, Rubrik, Commvault, Veeam)

Azure

AWS / GCP

Okta

IP networks

Firewalls

VMware vSphere, Resourcefulness and problem-solving aptitude

Excellent communication skills

Ability to communicate technical concepts and the impact of technical issues

Friendly and easy-going

Teamwork oriented

P1 Culture

One of our core tenets is making P1 a great place to work. You’ll have access to and be able to learn from great engineers who are easy to work with.

• 401(k)
• Dental insurance
• Flexible schedule

At P1 you’ll have an opportunity to work with a variety of customers across many industries, from media and entertainment, to aerospace, to medical and health sciences. You’ll be part of an engineering team that is immersed in new technology and is constantly learning from our customers, our partners, and each other.