Senior Microsoft Security Administrator

About the role

We are looking for a Senior Microsoft Security Administrator to lead the design, implementation, and operation of our Microsoft 365 security stack. You will work closely with IT and security teams to protect a user base of around 300 users across cloud and endpoint environments.

Key responsibilities

• Configure and maintain Conditional Access, MFA, PIM, and Identity Protection in Entra ID.
• Manage Defender for Endpoint, Intune, and related EDR policies, including ASR rules and automated remediation.
• Oversee Defender for Office 365 policies such as Safe Links, Safe Attachments, anti‑phishing, and quarantine triage.
• Implement DLP, Sensitivity Labels, and Information Barrier policies using Purview.
• Monitor shadow IT and enforce session policies with Defender for Cloud Apps.
• Maintain Microsoft Sentinel data connectors, write KQL analytics rules, and build Logic Apps playbooks for SOAR.
• Perform Tier 2/3 incident response, root‑cause analysis, and threat hunting.
• Track Secure Score, manage license health, and coordinate patch and vulnerability remediation.
• Document runbooks, architecture diagrams, and produce monthly threat and compliance reports.

Required profile

• Minimum 3 years of hands‑on experience with Microsoft 365 E5 security features.
• At least 3 years operating Microsoft Sentinel in a production environment.
• Strong analytical skills with proven ability to write KQL queries.
• Experience with Intune (MDM/MAM) for Windows device management.
• Solid PowerShell scripting background for automation.
• Fundamental knowledge of networking (DNS, firewalls, VPNs) and cloud identity (Entra ID, SAML, SSO).

Required skills

• Microsoft 365 security (E5, Defender XDR)
• Microsoft Sentinel
• Kusto Query Language (KQL)
• PowerShell
• Microsoft Intune
• Entra ID / Azure AD
• Networking basics (DNS, firewalls, VPNs)
• Cloud identity protocols (SAML, SSO)