Microsoft 365 Security & Compliance Specialist

Diné Development Corporation • Washington, DC

3d

About The Position

The Microsoft 365 Security & Compliance Specialist administers Microsoft 365 GCC G5 security, compliance, identity, and data protection controls. The position is contingent upon contract award. The specialist supports security monitoring, incident investigation and containment, secure cloud collaboration, documentation, reporting, and cybersecurity knowledge transfer. The role requires U.S. citizenship and favorable Tier 2 Public Trust adjudication before performance.

Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies providing IT, professional, environmental, and research and development services to government agencies and commercial organizations. DDC is dedicated to empowering the Navajo Nation and the communities it serves.

Requirements

• Bachelor’s degree.
• At least 6 years of relevant cybersecurity experience, including at least 5 years administering Microsoft 365 E5/G5 security and compliance workloads.
• U.S. citizenship.
• Favorable Tier 2 Public Trust adjudication required before performance.
• Security+ certification required.
• Experience or qualifications in M365 E5/G5 security, federal cloud policies, FISMA, FedRAMP, and Zero Trust.

Nice To Haves

• Cybersecurity Architect Expert, Security Operations Analyst, or M365 Security Administrator certification.
• GCC/G5 operational experience.

Responsibilities

• Configure, administer, and tune Microsoft Purview data loss prevention policies and rules; investigate sensitive data exposure alerts and document corrective actions.
• Manage Defender for Endpoint and Defender for Cloud Apps policies, investigate detections, and coordinate endpoint and cloud remediation.
• Administer Entra ID security controls, identity protection, and cloud security policies; support privileged access oversight and approved access changes.
• Monitor Microsoft 365 security and compliance alerts and configurations; adjust controls to reflect threat information and agency requirements.
• Maintain secure cloud collaboration and coordinate site permissions, data protection, and user impacts with the SharePoint administrator.
• Support incident investigation and containment with the Cybersecurity Operations Lead, preserving technical evidence and recording policy changes.
• Document configurations, procedures, and user guidance; provide monthly data protection KPI reports and evidence for risk reviews and authorization packages.
• Provide qualified backup support across cybersecurity functions and support transition and knowledge transfer.

Benefits

• Medical, dental, vision, life, and disability coverage.
• Retirement savings with company match.
• Paid time off.
• Voluntary supplemental benefits.
• Access to an employee assistance program.
• Educational assistance with tuition reimbursement. Eligible full-time employees receive the benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior