Job
Title: Microsoft Security Administrator/Engineer – Security & Identity
Focus
Location: On-site
in Columbia, MD (possibility to earn 1-2 remote days in the long term if all
goes well, but start out fully onsite), lOCALS ONLY
MUST
BE USC
Microsoft
GCC High experience is required
Position
Summary
We
are seeking a skilled Microsoft Security Administrator with
strong experience in Microsoft Entra ID (Azure AD), Microsoft Intune,
Microsoft Sentinel, and Microsoft Defender to support, secure, and
maintain our Microsoft cloud environment.
This
role is responsible for identity management, endpoint management,
security monitoring, and threat protection across Azure and Microsoft
365. The ideal candidate has hands-on experience implementing Zero
Trust principles, enforcing security baselines, and supporting
compliance-driven environments.
Key
Responsibilities
Azure
& Identity Administration
- Administer and maintain Microsoft
Entra ID (Azure AD) including:
- User and group management
- Conditional Access policies
- MFA enforcement
- Privileged Identity Management
(PIM)
- Identity lifecycle governance
- Support hybrid identity
environments (Azure AD Connect / Cloud Sync)
Endpoint
Management (Intune)
- Configure and manage Microsoft
Intune for Windows, macOS, and mobile devices
- Create and maintain:
- Device compliance policies
- Configuration profiles
- Application deployment policies
- Integrate Intune with Conditional
Access and Microsoft Defender for Endpoint
- Monitor device compliance and
remediate non-compliant endpoints
Security
Operations & Monitoring
- Configure, maintain, and
monitor Microsoft Sentinel
- Log ingestion and data connectors
- Analytics rules and alerts
- Incident triage and response
- KQL queries and workbooks
- Administer Microsoft
Defender solutions including:
- Defender for Endpoint
- Defender for Identity
- Defender for Cloud Apps
- Defender for Office 365
- Assist with threat detection,
investigation, and response activities
Security
& Compliance Support
- Implement and maintain security
controls aligned with best practices (Zero Trust, least privilege)
- Support audit and compliance
requirements (e.g., NIST, ISO, CMMC, internal audits)
- Maintain documentation, runbooks,
and standard operating procedures
- Participate in security
assessments, vulnerability remediation, and continuous improvement
initiatives
Required
Qualifications
- 5+ years of experience
administering Azure and Microsoft 365 environments
- Hands-on experience with:
- Microsoft Entra ID (Azure AD)
- Microsoft Intune
- Microsoft Sentinel
- Microsoft Defender suite
- Strong understanding of:
- Identity and access management
(IAM)
- Endpoint security and device
compliance
- SIEM/SOAR concepts
- Cloud security best practices
- Experience supporting security
incidents and operational troubleshooting
- Strong documentation and
communication skills
Preferred
Qualifications
- Experience in MSP,
regulated, or compliance-driven environments
- Familiarity with Zero
Trust architecture
- Experience with Azure networking
and security controls
- Knowledge of compliance frameworks
(NIST 800-53/171, CMMC, ISO 27001)
Preferred
Certifications
- Microsoft Certified: Azure
Administrator Associate (AZ-104)
- Microsoft Certified: Security
Operations Analyst Associate (SC-200)
- Microsoft Certified: Endpoint
Administrator Associate (MD-102)
- Microsoft Certified: Identity
and Access Administrator Associate (SC-300)
- Microsoft Certified: Cybersecurity
Architect Expert (SC-100) (a plus)