M365 Risk Engineer

TEKsystems•Irving, TX

5d•$50 - $65•Hybrid

About The Position

This contract role focuses on identifying, evaluating, and mitigating technology risks across enterprise productivity platforms, with a primary emphasis on Microsoft 365, Exchange, SharePoint, and related security and monitoring tools. You will own first-line risk outcomes from initial identification through evidence-based closure, ensuring that residual risk, control effectiveness, dependencies, and remediation status are clearly understood and communicated. The position blends hands-on engineering with strong risk-management judgment to design and validate controls, drive remediation, and strengthen the security, compliance, and resilience of critical productivity services.

Requirements

At least 7 years of relevant experience in enterprise technology engineering, infrastructure, operations, cybersecurity, technology risk, or a closely related discipline.
At least 5 years of hands-on experience supporting enterprise productivity, collaboration, messaging, or information-protection services.
Bachelors degree in computer science, information systems, cybersecurity, engineering, or equivalent practical experience.
Demonstrated experience owning technology risks and driving remediation from identification through validated closure.
Proven experience conducting risk assessments, evaluating control design, testing operating effectiveness, documenting evidence, and determining residual risk.
Experience with vulnerability management, including identifying, prioritizing, and remediating vulnerabilities across enterprise platforms.
Experience with secure configuration management, lifecycle management, and patching of enterprise systems.
Experience with formal change control processes and production validation for technology changes.
Experience with incident and problem management, including root-cause analysis and corrective-action planning.
Experience supporting audits, regulatory examinations, risk committees, and formal issue-management processes.
Hands-on experience with Microsoft 365, including administration, configuration, and security hardening.
Meaningful experience with at least three of the following: Exchange Server Subscription Edition or enterprise Exchange hybrid environments; SharePoint Server Subscription Edition or hybrid SharePoint environments; Splunk Enterprise; email hygiene, routing, authentication, anti-spam, or anti-malware platforms; Microsoft Defender for Office 365 or comparable threat-management platforms; Microsoft Purview, data loss prevention, information protection, or audit capabilities.
Ability to interpret logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings.
Strong written and verbal communication skills, including the ability to present complex technical risk topics clearly to both engineering teams and leadership.
Competence in technology risk assessment and prioritization, with a focus on practical, outcome-based remediation.
Competence in control design and operating-effectiveness validation for security, operational, and recovery controls.
Competence in vulnerability, configuration, and lifecycle risk management for enterprise platforms.
Competence in Microsoft 365, Exchange, SharePoint, email-security, and threat-management engineering.
Competence in Splunk search, analytics, monitoring, and risk reporting.
Competence in remediation architecture and production change execution.
Competence in resilience, recovery, incident, and problem management.
Discipline in maintaining technical evidence, auditability, and systems-of-record for risk and control activities.

Nice To Haves

Experience managing technology vendors and driving vendor-dependent remediation activities.
Experience working in hybrid Exchange and SharePoint environments, including integration with Microsoft 365.
Experience with Linux and cloud environments in the context of enterprise productivity or security platforms.
Familiarity with email hygiene solutions, including routing, authentication, anti-spam, and anti-malware technologies.
Exposure to Microsoft Defender for Office 365 or similar threat-management platforms, including configuration and tuning.
Exposure to Microsoft Purview or comparable data loss prevention, information protection, and audit capabilities.
Experience working in environments where risk, compliance, and engineering teams collaborate closely to manage operational risk.
Comfort working as a technical authority, providing guidance and recommendations to stakeholders at multiple levels.
Ability to balance hands-on engineering work with governance, documentation, and stakeholder management responsibilities.
Strong organizational skills and attention to detail when managing multiple concurrent risk and remediation initiatives.

Responsibilities

Manage technology risk mitigation engineering across the Productivity Engineering portfolio, with a focus on Microsoft 365 and related platforms.
Perform comprehensive technology risk assessments and prioritize remediation activities based on business impact, risk exposure, and operational dependencies.
Develop and execute remediation strategies that address root causes, reduce residual risk, and prevent recurrence of issues.
Evaluate and validate the effectiveness of security, operational, and recovery controls across productivity, collaboration, messaging, and information-protection services.
Lead or help lead the implementation of engineering solutions that improve security, regulatory compliance, and operational resilience for M365, Exchange, SharePoint, and associated systems.
Govern and support issue management, including tracking, remediation planning, exception processes, and risk acceptance activities.
Establish and maintain risk monitoring, reporting, and metrics, as well as executive governance frameworks that provide clear visibility into risk posture and remediation progress.
Support internal and external audits, regulatory reviews, risk committees, and control examinations through evidence-based validation and thorough documentation.
Strengthen platform resilience, recovery readiness, and technology lifecycle management for Microsoft 365, email, SharePoint, and related infrastructure.
Act as a technical authority for operational risk decisions, providing guidance on control design, remediation options, and risk trade-offs.
Interpret and analyze logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings to identify and remediate risks.
Coordinate with engineering, security, compliance, data, user experience, architecture, operations, and risk governance partners to ensure aligned and timely risk mitigation.
Drive remediation from initial risk identification through validated closure, ensuring that corrective actions are implemented, tested, and documented.
Support the design and execution of remediation architecture and production changes in a controlled and auditable manner.
Utilize Splunk and other monitoring tools to perform search, analytics, monitoring, and risk reporting for productivity platforms.
Contribute to automation and data-quality improvements that enhance risk monitoring, evidence collection, and systems-of-record discipline.
Manage technology vendors where required and drive vendor-dependent remediation to completion.
Allocate efforts across core areas such as M365/infrastructure engineering, technology risk and compliance, and stakeholder/audit management to ensure balanced and effective coverage.