Senior Microsoft Security Engineer

We are looking for a Senior Microsoft Security Engineer to lead and strengthen the organization’s Microsoft-based security environment in Michigan. This contract opportunity is ideal for a hands-on, detail-oriented candidate who can improve protections across identities, endpoints, servers, Microsoft 365, Azure resources, applications, and sensitive information while working closely with IT and security stakeholders. The role is centered on engineering and optimization, with external monitoring support handling around-the-clock alert observation and initial response activities.

Responsibilities:

• Lead the administration, tuning, and ongoing enhancement of Microsoft security platforms across endpoint, identity, server, cloud, and collaboration environments.
• Strengthen protection coverage by identifying control gaps, unmanaged assets, policy drift, and security weaknesses, then driving corrective actions to closure.
• Manage and improve Microsoft Entra ID security capabilities, including Conditional Access, identity protection measures, and privileged access controls.
• Apply Zero Trust and least-privilege practices across user access, devices, applications, workloads, and data to reduce organizational risk.
• Support Microsoft Purview initiatives such as data classification, information protection, and investigative capabilities for security and compliance needs.
• Partner with Azure and application teams to implement secure cloud configurations and improve the security posture of hosted workloads.
• Use Defender for Cloud and related Microsoft tools to evaluate risks in Azure environments and recommend remediation priorities.
• Coordinate with IT operations and external security providers on monitoring effectiveness, incident escalation, patch compliance reporting, and vulnerability remediation efforts.
• Automate recurring security administration and reporting tasks through PowerShell, Microsoft Graph, and similar tooling while maintaining accurate standards, procedures, and change documentation.
• At least 5 years of enterprise security engineering experience, with 7 or more years preferred.
• Recent hands-on expertise with Microsoft security technologies, including strong depth in Microsoft Defender for Endpoint and the broader Defender ecosystem.
• Experience working with Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and cloud workload protection capabilities.
• Strong knowledge of Microsoft Entra ID security, including Conditional Access, identity governance, and privileged access controls.
• Proven ability to secure Microsoft Azure environments using Defender for Cloud and native Azure security features.
• Familiarity with server update and management tools such as Azure Update Manager, Azure Arc, or comparable platforms.
• Working knowledge of Microsoft Purview, information protection concepts, and data security controls.
• Background supporting security investigations, incident response activities, and collaboration with managed security or SOC providers.