AI/M365 Security and Identity Governance Engineer

Stellenbeschreibung:

Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls
Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads
Implement Azure Policy, private networking, logging, audit, and security monitoring requirements
Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls
Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders
Develop security standards and operational procedures for delivery and O&M teams
Operate independently or as a team lead
Select persistence technologies and define source control strategies
Design subsystem infrastructure and improve system reliability and scalability
Manage cross-functional delivery and provide functional leadership
Troubleshoot advanced client issues and support requirements gathering
Contribute to vendor presentations or proposal activities

Requirements

6+ years in Microsoft cloud security or identity engineering
Hands-on expertise with Entra ID, Conditional Access, RBAC, PIM, Azure Policy, and secure Azure networking
Experience implementing Microsoft Purview, M365 security, or data-protection controls
Working knowledge of NIST-based controls and regulated-environment delivery
Ability to balance secure design with practical adoption and delivery outcomes
Azure Government or GCC High experience (nice to have)
Microsoft security certifications such as SC-300, SC-100, or SC-200 (nice to have)
AI-security, data-governance, or Zero Trust implementation experience (nice to have)

Core Competencies

Demonstrates expertise in Microsoft cloud security and identity engineering, with a focus on implementing Entra ID, Conditional Access, and Azure Policy. Proven ability to develop security standards and collaborate with cross-functional teams to ensure compliance and operational excellence.