微软安全工程师- 远程（美国任何地方）
Microsoft Security Engineer- Remote (Anywhere in the U.S.)
GuidePoint Security 提供值得信赖的网络安全专业知识、解决方案和服务，帮助组织做出更好的决策并降低风险。通过采用三层、全面的方法来评估安全态势和生态系统，GuidePoint 使一些国内顶级组织，如财富 500 强公司和美国政府机构，能够识别威胁、优化资源并集成最适合的解决方案以降低风险。
职位描述：
我们正在寻找一位以安全为核心、专注于 Microsoft 的工程师加入我们的 Microsoft 云安全团队。该职位将主要为从小型企业到大型企业的客户提供实际的安全服务。您的工作重点是 Microsoft Entra ID（身份和访问管理）和 Microsoft Purview（数据保护），并在 Intune 和 Defender XDR 方面提供支持。您将与跨不同行业和环境的架构师和高级顾问合作。
您将独立负责技术交付（80% 的可计费目标），在分配的项目中管理自己的时间和沟通，并在项目之间参与内部实践和知识分享工作。
职责和要求：
- 身份与访问（Entra ID / AD）：设计和实施身份架构，混合同步（Entra Connect），条件访问，多因素认证/无密码登录，以及身份治理（PIM、RBAC、访问审核、权限管理）。
- 通过 SSO（SAML/OIDC）、企业应用注册和 SCIM 配置进行应用程序集成。
- 使用 Entra ID 保护、登录和审计日志调查并修复身份风险；推动混合身份卫生（过期对象清理、特权账户减少、分层管理员模型）。
- 数据安全与合规（Purview）：在 M365 中设计和实施敏感性标签、DLP 和保留策略；支持数据分类、信息保护部署和数据安全态势评估。
- 根据项目需求支持 eDiscovery、内部风险管理和通信合规，以及 AI 数据安全准备（DSPM for AI）。
- Intune 与 Defender XDR：在各种平台上配置设备合规性、配置文件和应用部署；支持 Defender for Endpoint、Office 365、Identity 和 Cloud Apps 在云和混合环境中的使用。
- 其他指派的任务。
- 遵循 GuidePoint Security 核心价值观。
所需经验：
- 本科优先。
- 2–5 年 IT 行政经验
查看英文原文
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
General Description:
We are seeking a security first, Microsoft focused engineer to join our Microsoft Cloud Security Team. This role will be primarily delivering hands-on security engagements for clients ranging from small businesses to large enterprises. Your work centers on Microsoft Entra ID (identity and access management) and Microsoft Purview (data protection), with supporting work in Intune and Defender XDR. You'll partner with architects and principal consultants across varied industries and environments.
You'll own your technical delivery independently (80% billable target), managing your time and communication within assigned engagements, and contribute to internal practice and knowledge-sharing efforts between projects.
Roles and Responsibilities:
- Identity & Access (Entra ID / AD): Design and implement identity architecture, hybrid sync (Entra Connect), Conditional Access, MFA/passwordless, and identity governance (PIM, RBAC, access reviews, entitlement management).
- Integrate applications via SSO (SAML/OIDC), enterprise app registrations, and SCIM provisioning.
- Investigate and remediate identity risks using Entra ID Protection, sign-in and audit logs; drive hybrid identity hygiene (stale object cleanup, privileged account reduction, tiered admin models).
- Data Security & Compliance (Purview): Design and implement sensitivity labels, DLP, and retention policies across M365; support data classification, information protection rollouts, and data security posture assessments.
- Support eDiscovery, Insider Risk Management, communication compliance, and AI data security readiness (DSPM for AI) as engagements require.
- Intune & Defender XDR: Configure device compliance, configuration profiles, and app deployments across platforms; support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.
- Other duties as assigned.
- Adhere to GuidePoint Security Core Values.
Required Experience:
- Bachelor’s degree preferred.
- 2–5 years in IT administration, identity management, or security operations.
- Hands-on production experience with Microsoft Entra ID and on-premises Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).
- Knowledge of core authentication protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP.
- Experience implementing Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery) and comfort supporting Intune and Defender XDR.
- Basic PowerShell scripting for automation and reporting (e.g., Microsoft Graph PowerShell).
- Strong troubleshooting skills, attention to detail, and clear written and verbal communication.
- Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience:
- Advanced AD work: multi-domain/forest design, migrations, tiered administration, legacy auth cleanup.
- Microsoft Sentinel: log onboarding, detection development, or broader SIEM/SOAR experience.
- Azure infrastructure and security (Azure Policy, network security, landing zones, RBAC).
- SharePoint Online governance, Teams Voice, Power BI/Fabric, or Copilot Studio/Azure AI Foundry experience.
Travel Requirements:
- This role is 100% remote requiring less than 10% travel for corporate events
Physical Requirements:
- Sedentary work
- Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
- Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?
GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perks….
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
- 12 corporate holidays and a Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option