Associate – Microsoft 365 Security Engineer

RSM•Chicago, IL

1d•Hybrid

About The Position

RSM is hiring an Associate to design, deploy, and advise clients on Microsoft 365 security solutions across Microsoft Defender XDR, Entra ID, Intune, and Microsoft Purview in hybrid and cloud environments. This client-facing consulting role requires professionalism, business acumen, initiative, independent problem-solving, and the ability to discuss security posture and recommendations with technical and non-technical stakeholders. The Associate will manage work from discovery through handoff, translate security frameworks into practical Microsoft 365 configurations, and contribute to client delivery and team resources. The role includes occasional travel to client sites. Most RSM roles use a hybrid workstyle, with team members aligned to an RSM office and meeting in person when useful for clients, teams, development, or relationship-building. Some roles may be virtual or primarily on-site depending on role requirements, team priorities, and client needs. The compensation range is $62,800–$103,400. RSM describes its benefits and compensation package as competitive and provides information about its total rewards through its careers website.

Requirements

At least 2 years of hands-on IT or security experience, ideally in Microsoft environments.
Strong written and verbal communication skills.
Practical experience with at least two of Microsoft Defender XDR, Entra ID, Microsoft Purview, and Intune.
Working knowledge of on-premises infrastructure, including Active Directory, DNS, Group Policy, and Windows Server; Exchange Server experience is ideal.
Understanding of hybrid identity, including directory synchronization and authentication methods.
Familiarity with PowerShell for administration and scripting.
Working knowledge of Zero Trust, least privilege, identity and access management, data classification, and endpoint protection.
Ability to travel occasionally to client sites.

Nice To Haves

Bachelor’s degree in information technology, cybersecurity, computer science, or a related field, or equivalent work experience.
Microsoft certifications such as SC-300, SC-200, SC-401, MS-102, AZ-500, SC-900, or MS-900, or willingness to obtain one within 3 months.
Broader security certifications such as Security+, CISSP (or progress toward it), or CCSP.
Prior consulting or managed services experience across multiple client tenants.
Experience with Intune and device compliance as they relate to Conditional Access.
Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules.
Exposure to Microsoft Sentinel or other SIEM platforms.
Experience in GCC or GCC High environments.
Familiarity with Copilot and AI data security considerations in Microsoft 365.

Responsibilities

Plan, configure, and deploy Microsoft 365 security solutions across Defender XDR, Entra ID, Intune, and Microsoft Purview.
Design and implement Conditional Access, Privileged Identity Management, MFA, and identity protection policies.
Build Purview data protection controls, including sensitivity labels, DLP, retention, and insider risk policies.
Support hybrid scenarios involving Entra Connect or Cloud Sync, on-premises Active Directory, Group Policy, and hybrid Exchange.
Run current-state assessments and produce findings, recommendations, and roadmaps.
Automate configuration and reporting with PowerShell and Microsoft Graph.
Lead working sessions and workshops with client IT and security stakeholders.
Explain how Microsoft 365 controls map to frameworks such as NIST CSF, CIS Benchmarks, and ISO 27001.
Present recommendations and trade-offs to technical and non-technical audiences.
Write design documents, runbooks, status updates, and executive summaries.
Manage personal tasks and timelines and raise risks early.
Contribute reusable templates, scripts, and standard policy frameworks.
Stay current on the Microsoft security roadmap and share learning with the team.