Microsoft 365 Security Engineer

You will lead the build-out and deployment of Microsoft 365 security capabilities, ensuring solutions are implemented, tested, and documented for long-term success.

• Implement Microsoft Purview Data Loss Prevention (DLP) across cloud apps, endpoints, and file systems
• Design and deploy data classification and retention policies using Data Lifecycle Management
• Configure and manage Microsoft Intune for device enrollment, compliance, and security controls
• Support Apple device management via Apple Business Manager integration
• Assist with multi-factor authentication (MFA) and secure access configurations, including VPN use cases
• Test, monitor, and refine policies for effectiveness and usability
• Deliver clear documentation outlining configurations, workflows, and recommendations

Key Focus Areas

Microsoft Purview (DLP & Data Lifecycle Management)

• Configure DLP policies across Microsoft 365 and endpoints
• Establish sensitive data classifications
• Define and deploy retention labels and policies
• Continuously refine policies based on business needs

Mobile Device Management (Microsoft Intune)

• Enroll and manage Windows and Apple devices
• Configure compliance policies, security baselines, and application controls
• Support automated enrollment through Apple Business Manager
• Align with hybrid identity environments

File System Data Governance

• Implement governance and controls for file-based data
• Align on-premise data policies with cloud-based standards

Access Security & MFA

• Support implementation of MFA for email and remote access
• Assist with secure VPN configuration and enforcement

Do you have experience in VPN management?, * Hands-on experience with Microsoft Purview (DLP and Data Lifecycle Management)

• Strong expertise in Microsoft Intune and modern device management
• Experience with Apple Business Manager and cross-platform device enrollment
• Knowledge of identity and access management in hybrid environments
• Familiarity with endpoint security, MFA, and VPN solutions
• Ability to lead technical implementations independently
• Strong documentation and communication skills

Preferred Background

• Experience in short-term, delivery-focused implementation projects
• Exposure to regulated environments or data compliance requirements
• Familiarity with file server governance tools

Deliverables

• Fully implemented Microsoft 365 security solutions
• Tested and optimized configurations across all workstreams
• Clear, well-structured documentation (“blueprint”) for ongoing use