> Markdown version of [/jobs/ext/4622903-microsoft-identity-and-security-engineer](https://www.wearedevelopers.com/jobs/ext/4622903-microsoft-identity-and-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Microsoft Identity and Security Engineer

- **Company:** P1 TECHNOLOGIES, INC.
- **Location:** United States (Remote available)
- **Salary:** $125,000 - $175,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Disaster Recovery, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Identity and Access Management, Internet Protocol, Microsoft Office, Windows PowerShell, Microsoft SharePoint, VMware VSphere, Okta, Firewalls (Computer Science), AI Coding Agents, Microsoft InTune, Sender Policy Framework (SPF), Veeam, Commvault
- **Published:** November 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a515b4d2ac23650b

## About the Role

An engineer who lives in Entra ID and Microsoft 365 security and is passionate about learning and capable of providing outstanding customer service. You will work directly with a variety of customers to assess, harden, and operate their Microsoft identity and security environments, from Conditional Access and PIM to Defender and Purview. Identity and security is the core of this role, but we're a small team and you'll be exposed to everything we do. You'll also have the opportunity to work on P1 Protect, our data protection service, where protecting M365 is a big part of the job., Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)

Microsoft Purview (sensitivity labels, DLP, retention)

Intune and LAPS

Active Directory and hybrid identity (Entra Connect)

Exchange Online, SharePoint, Teams administration

PowerShell and Microsoft Graph

Windows

AI dev/coding agents

Experience as a Microsoft 365 / Systems Administrator

Tier 2 Technical Skills (multiple required):

Data Protection (Backup/Recovery) Software (Keepit, Cohesity, Rubrik, Commvault, Veeam)

Azure

AWS / GCP

Okta

IP networks

Firewalls

VMware vSphere, Resourcefulness and problem-solving aptitude

Excellent communication skills

Ability to communicate technical concepts and the impact of technical issues

Friendly and easy-going

Teamwork oriented

P1 Culture

One of our core tenets is making P1 a great place to work. You'll have access to and be able to learn from great engineers who are easy to work with.

## Description

Perform Microsoft 365 and Entra ID security reviews and deliver prioritized remediation plans.

Design and implement Conditional Access, MFA, Privileged Identity Management, and least privileged role assignments.

Deploy and operate Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps) and respond to alerts and incidents.

Implement Purview data protection, sensitivity labels, DLP, and retention policies.

Manage Windows endpoints with Intune and LAPS.

Design, harden, and support Active Directory and hybrid identity (Entra Connect, Cloud Sync).

Plan and execute Microsoft 365 tenant migrations and consolidations.

Build and roll out email authentication (SPF, DKIM, DMARC) and communicate changes to customers.

Onboard and support M365 workloads on P1 Protect and participate in disaster recovery planning and work sessions.

Automate repeatable tasks and reporting with PowerShell and Microsoft Graph.

Configure access using a least privileged approach, audit, and ensure adherence to policies and procedures.

Communicate upgrade and rollback plans and execute upgrades.

Maintain an internal wiki with technical documentation, manuals and IT policies.

Communicate with clients, understand their needs and build trust.

Project Examples:

Run a Microsoft 365 security review for a customer, present findings, then implement Conditional Access, PIM, and Defender across the tenant.

Migrate a customer from one M365 tenant to another with minimal disruption to mail, Teams, and SharePoint.

Build a DMARC rollout plan, move a customer from monitoring to enforcement, and keep their third party senders working.

Harden a customer's Active Directory and set up hybrid identity with Entra ID.