M365 Risk Engineer

TEKsystems • Charlotte, NC

8d • $50 - $65 • Hybrid

About The Position

This 24-month contract role focuses on identifying, evaluating, and mitigating technology risks across enterprise productivity platforms, primarily Microsoft 365, Exchange, SharePoint, and associated security and monitoring tools. The engineer owns first-line risk outcomes from initial identification through evidence-based closure, clarifying residual risk, control effectiveness, dependencies, and remediation status. The work combines hands-on engineering with risk-management judgment to design and validate controls, drive remediation, and strengthen the security, compliance, and resilience of critical productivity services.

The role is based in Charlotte, North Carolina, or Irving, Texas, and follows a hybrid model with onsite work three days per week and remote work for the remaining days, subject to team and project needs. The engineer works in a large-scale enterprise environment using Microsoft 365, Exchange, SharePoint, Splunk, Microsoft Defender for Office 365, Microsoft Purview, and related platforms. The environment emphasizes structured change control, formal risk and issue management, and auditability. Collaboration spans engineering, operations, security, compliance, and risk governance teams and involves Windows, Linux, and cloud technologies.

Requirements

• At least 7 years of relevant experience in enterprise technology engineering, infrastructure, operations, cybersecurity, technology risk, or a closely related discipline.
• At least 5 years of hands-on experience supporting enterprise productivity, collaboration, messaging, or information-protection services.
• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or equivalent practical experience.
• Demonstrated experience owning technology risks and driving remediation from identification through validated closure.
• Experience conducting risk assessments, evaluating control design, testing operating effectiveness, documenting evidence, and determining residual risk.
• Experience with vulnerability management, including identifying, prioritizing, and remediating vulnerabilities across enterprise platforms.
• Experience with secure configuration management, lifecycle management, and patching of enterprise systems.
• Experience with formal change-control processes and production validation for technology changes.
• Experience with incident and problem management, including root-cause analysis and corrective-action planning.
• Experience supporting audits, regulatory examinations, risk committees, and formal issue-management processes.
• Hands-on experience administering, configuring, and security-hardening Microsoft 365.
• Meaningful experience with at least three of the following: Exchange Server Subscription Edition or enterprise Exchange hybrid environments; SharePoint Server Subscription Edition or hybrid SharePoint environments; Splunk Enterprise; email hygiene, routing, authentication, anti-spam, or anti-malware platforms; Microsoft Defender for Office 365 or comparable threat-management platforms; Microsoft Purview, data loss prevention, information protection, or audit capabilities.
• Ability to interpret logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings.
• Strong written and verbal communication skills, including the ability to explain complex technical risk topics to engineering teams and leadership.
• Competence in technology risk assessment and prioritization, with a focus on practical, outcome-based remediation.
• Competence in control design and operating-effectiveness validation for security, operational, and recovery controls.
• Competence in vulnerability, configuration, and lifecycle risk management for enterprise platforms.
• Competence in Microsoft 365, Exchange, SharePoint, email-security, and threat-management engineering.
• Competence in Splunk search, analytics, monitoring, and risk reporting.
• Competence in remediation architecture and production change execution.
• Competence in resilience, recovery, incident, and problem management.
• Discipline in maintaining technical evidence, auditability, and systems-of-record for risk and control activities.

Nice To Haves

• Experience managing technology vendors and driving vendor-dependent remediation activities.
• Experience working in hybrid Exchange and SharePoint environments, including integration with Microsoft 365.
• Experience with Linux and cloud environments in the context of enterprise productivity or security platforms.
• Familiarity with email hygiene solutions, including routing, authentication, anti-spam, and anti-malware technologies.
• Exposure to Microsoft Defender for Office 365 or similar threat-management platforms, including configuration and tuning.
• Exposure to Microsoft Purview or comparable data loss prevention, information protection, and audit capabilities.
• Experience working in environments where risk, compliance, and engineering teams collaborate closely to manage operational risk.
• Comfort working as a technical authority and providing guidance and recommendations to stakeholders at multiple levels.
• Ability to balance hands-on engineering with governance, documentation, and stakeholder management responsibilities.
• Strong organizational skills and attention to detail when managing multiple concurrent risk and remediation initiatives.

Responsibilities

• Manage technology risk mitigation engineering across the Productivity Engineering portfolio, focusing on Microsoft 365 and related platforms.
• Assess technology risks and prioritize remediation based on business impact, risk exposure, and operational dependencies.
• Develop and execute remediation strategies that address root causes, reduce residual risk, and prevent recurrence.
• Evaluate and validate security, operational, and recovery controls across productivity, collaboration, messaging, and information-protection services.
• Lead or help lead engineering solutions that improve security, regulatory compliance, and operational resilience for M365, Exchange, SharePoint, and associated systems.
• Govern and support issue management, including tracking, remediation planning, exception processes, and risk acceptance.
• Establish and maintain risk monitoring, reporting, metrics, and executive governance frameworks that show risk posture and remediation progress.
• Support internal and external audits, regulatory reviews, risk committees, and control examinations through validation and documentation.
• Strengthen platform resilience, recovery readiness, and technology lifecycle management for Microsoft 365, email, SharePoint, and related infrastructure.
• Provide technical authority and guidance on operational risk decisions, control design, remediation options, and risk trade-offs.
• Analyze logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings to identify and remediate risks.
• Coordinate with engineering, security, compliance, data, user experience, architecture, operations, and risk governance partners to align risk mitigation.
• Drive remediation from initial risk identification through validated closure, ensuring corrective actions are implemented, tested, and documented.
• Support remediation architecture and production changes in a controlled and auditable manner.
• Use Splunk and other monitoring tools for search, analytics, monitoring, and risk reporting for productivity platforms.
• Contribute to automation and data-quality improvements for risk monitoring, evidence collection, and systems-of-record discipline.
• Manage technology vendors where required and drive vendor-dependent remediation to completion.
• Allocate effort across M365 and infrastructure engineering, technology risk and compliance, and stakeholder and audit management.

Benefits

• Medical, dental, and vision coverage, subject to eligibility and plan terms.
• Critical illness, accident, and hospital coverage, subject to eligibility and plan terms.
• 401(k) retirement plan with pre-tax and Roth post-tax contribution options, subject to eligibility and plan terms.
• Voluntary life and AD&D insurance for the employee and dependents, subject to eligibility and plan terms.
• Short- and long-term disability coverage, subject to eligibility and plan terms.
• Health Spending Account (HSA), subject to eligibility and plan terms.
• Transportation benefits, subject to eligibility and plan terms.
• Employee Assistance Program, subject to eligibility and plan terms.
• Time off/leave, including PTO, vacation, or sick leave, subject to eligibility and plan terms.

What This Job Offers

• Career Level: Senior