Senior Security Engineer, Microsoft Stack

• Engineer and implement integrated security controls across Microsoft Defender XDR, Microsoft Entra ID Protection, App Governance, Intune, and Microsoft Purview Insider Risk Management, Data Loss Prevention, and Data Security Posture Management. Uses these platforms to reduce identity, endpoint, application, cloud, and data risk through secure configuration, attack-surface

reduction, automated response, and continuous validation of control effectiveness.

• In partnership with IAM, engineers identity security controls in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management, access reviews, workload identities, and hybrid identity protections. Test every policy change in a non-production tenant before promoting it to production.
• Build production-quality security automation using PowerShell, Microsoft Graph, KQL, and REST APIs, and deploys repeatable configurations as code through Bicep or Terraform in CI/CD pipelines, to reduce manual effort, configuration drift, and time to remediate.
• Integrate Microsoft security telemetry with SNHU's SIEM, SOAR, IT service management, and threat intelligence platforms; troubleshoots cross-platform issues through to permanent resolution; and serves as the security engineering point of contact with Microsoft, assessing roadmap changes, feature releases, and deprecations for their impact on SNHU controls.
• Support partner-owned Microsoft platforms by supplying configuration expertise, review, and testing: Defender for Cloud and Azure Policy with Cloud Engineering, Intune baselines and attack surface reduction with Endpoint Engineering, and Purview sensitivity labels and data loss prevention with Data Security Posture Management (DSPM).
• Document every implementation as diagrams, configuration standards, runbooks, test results, and as-built records, and provides control evidence supporting audit, control testing, and FERPA, GLBA Safeguards Rule, and PCI DSS compliance activities.
• Mentors engineers through configuration review, pair troubleshooting, and design feedback, and escalates material control deficiencies to Security Architecture and leadership for prioritization. This role carries no formal people-management responsibility.
• Other duties and responsibilities as assigned. Job responsibilities can change at any time, with or without notice.

• 7+ years of experience in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.
• 3+ year in the most recent Microsoft security platforms in an enterprise environment.
• Bachelor's degree in information technology, computer science, information security or related discipline or equivalent years of experience acceptable.
• Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100
• Industry certifications: CISSP, CCSP, GIAC, or equivalent
• Hands-on experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure
• Infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline
• Python or a second automation or scripting language
• Microsoft Entra ID, Conditional Access, and modern authentication protocols including OAuth 2.0, OpenID Connect, SAML, and Kerberos
• Microsoft 365 and Azure security configuration and governance controls
• Windows, Active Directory, networking fundamentals, certificates, and encryption
• Logging and telemetry pipelines, detection engineering, and incident response practice
• Zero Trust, least privilege, defense in depth, and risk-based decision-making
• PowerShell at a production scripting level
• Kusto Query Language for detection authoring and investigation
• Microsoft Graph and REST API integration
• Version control and change management discipline, including Git-based workflows
• Clear technical writing for runbooks, standards, and control evidence

We believe real innovation comes from inclusion - where different experiences, perspectives and talents are celebrated. So if you're wondering whether SNHU is right for you, take the leap and apply. You might be just the person we're looking for.

If you have a disability and require a reasonable accommodation to fully engage in any part of the application or hiring process, please complete the Accommodation Request form or contact us at 603-626-9447. A member from the Employee Accommodation Support Center will be in contact with you within two business days to discuss your request.

You're the whole package. Your benefits should be, too. As a full-time employee at SNHU, you'll get:

• High-quality, low-deductible medical insurance

• Low to no-cost dental and vision plans

• 5 weeks of paid time off (plus almost a dozen paid holidays)

• Employer-funded retirement

• Free tuition program

• Parental leave

• Mental health and wellbeing resources