Senior Cyber Security Microsoft Ecosystem Engineer - Remote
City/State
Virginia Beach, VA
Work Shift
First (Days) Overview:
Sentara is hiring for a Senior Cyber Security Microsoft Ecosystem Engineer!
This position is fully remote.
Overview
We’re seeking a highly skilled Senior Security Engineer with deep knowledge and expertise in Microsoft technologies, policies, and licensing, to lead the design, implementation, and management of enterprise-grade security solutions. This role is critical to ensuring the confidentiality, integrity, and availability of our Microsoft-based infrastructure. This includes Microsoft Office 365, Purview, Azure, Intune, and Windows endpoints.
You’ll work with cross-functional teams (Infrastructure, IAM, GRC, cloud architects, Enterprise Privacy and Compliance teams, Communications) to proactively identify risks, implement controls, and respond to evolving threats.
Primary Responsibilities:
- Design, recommend, implement and troubleshoot security controls across Microsoft 365, Purview, DSPM, Azure, Intune, EDR/Defender suite, Power Platform and Windows Server environments
- Review and recommend security policies using Microsoft Entra ID, Conditional Access, Purview, DSPM, Defender suite, and Power Platform
- Review current security controls and architectures and make recommendations for control replacements using Microsoft’s ecosystem for on-prem, hybrid, and cloud environments
- Design, implement, and enforce sensitivity labels, encryption, data retention, and DLP policies across M365 ecosystem
- Design and maintain end-to-end architecture integrations between security tools and adjacent platforms (CASB, SOAR, SIEM, ServiceNow, CMDB, email gateways, and threat intel platforms)
- Monitor and analyze security logs to support incident response, forensics, and investigation activities
- Monitor and optimize system health, connector fidelity, data quality, and agent deployment success across thousands of assets
- Work with cross functional teams to perform threat modeling, vulnerability assessments, and incident response for Microsoft platforms
- Collaborate with compliance teams to meet regulatory requirements (e.g., NIST, ISO 27001, HIPAA) and support audit activities and deliverables
- Support maturity modeling, executive dashboards, and architectural blueprints to track progress across tooling ecosystems
- Develop and maintain operational documentation and reports to support monthly trend analysis as well as project components
- Lead implementation and deployment efforts across the enterprise involving technical and leadership teams
- Provide technical mentorship and training to engineers and contribute to security architecture and infrastructure reviews
- Stay current with industry trends Microsoft’s evolving security landscape and align technical and process improvement recommendations with organizational goals
Education
- 5+ years of relevant experience with a degree (Required)
- 7+ years of relevant experience without a degree (Required)
Certification/Licensure
- No specific certification or licensure requirements
Experience
Required:
- 5+ years of experience in cybersecurity, with a focus on Microsoft technologies and licensing
- Deep knowledge of Microsoft 365 security features, Purview, DSPM, Azure, Intune, and Defender suite
- Experience with PowerShell scripting and automation for security tasks
- Familiarity with Zero Trust architecture and identity-based access controls
- Strong understanding of data security, threat detection, incident response, and vulnerability management
- Excellent communication and documentation skills
Preferred:
- Microsoft Certified: Cybersecurity Architect Expert or equivalent
- Experience with Microsoft Sentinel, Purview, and compliance center tools
- Experience in hybrid cloud environments and enterprise-scale deployments
- Experience with healthcare or regulated industry environments (HIPAA, HICP, NIST).
- Familiarity with architectural review boards, solution design doc
Get remote jobs like this by email
10 hand-picked jobs, one email a day. No spam, unsubscribe anytime.