Associate – Microsoft 365 Security Engineer

RSM US LLP•Cedar Rapids, IA

3d•$62,800 - $103,400•Hybrid

About The Position

RSM is hiring an Associate to design, deploy, and advise clients on Microsoft 365 security solutions in hybrid and cloud environments. The client-facing consulting role works across Microsoft Defender XDR, Entra ID, Microsoft Intune, and Microsoft Purview. The Associate leads technical conversations, translates security frameworks into practical Microsoft 365 configurations, and manages work from discovery through handoff. The role includes planning and implementing security controls, assessing client environments, developing recommendations and roadmaps, and communicating those recommendations to technical and non-technical stakeholders. The Associate also contributes to team resources and keeps current with the Microsoft security roadmap. Occasional travel to client sites is required. RSM describes most roles as hybrid, with team members aligned to an office and meeting in person when it supports client, team, development, or relationship needs. RSM offers a competitive benefits and compensation package. The compensation range for this role is $62,800–$103,400, with pay determined by factors including education, skills, work experience, certifications, and location.

Requirements

At least 2 years of hands-on IT or security experience, ideally in Microsoft environments.
Strong written and verbal communication skills.
Practical experience with at least two of Microsoft Defender XDR, Entra ID, Microsoft Purview, and Intune.
Working knowledge of on-premises infrastructure, including Active Directory, DNS, Group Policy, and Windows Server; Exchange Server knowledge is ideal.
Understanding of hybrid identity, including directory synchronization and authentication methods.
Familiarity with PowerShell for administration and scripting.
Working knowledge of core security concepts, including Zero Trust, least privilege, identity and access management, data classification, and endpoint protection.
Ability to travel occasionally to client sites.

Nice To Haves

Bachelor's degree in information technology, cybersecurity, computer science, or a related field, or equivalent work experience.
Microsoft certifications such as SC-300, SC-200, SC-401, MS-102, AZ-500, SC-900, or MS-900, or willingness to obtain one within 3 months.
Broader security certifications such as Security+, CISSP (or progress toward it), or CCSP.
Prior consulting or managed services experience across multiple client tenants.
Experience with Intune and device compliance as it relates to Conditional Access.
Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules.
Exposure to Microsoft Sentinel or other SIEM platforms.
Experience in GCC or GCC High environments.
Familiarity with Copilot and AI data security considerations in Microsoft 365.

Responsibilities

Plan, configure, and deploy Microsoft 365 security solutions across Defender XDR, Entra ID, Intune, and Microsoft Purview.
Design and implement Conditional Access, Privileged Identity Management, MFA, and identity protection policies.
Build Purview data protection controls, including sensitivity labels, DLP, retention, and insider risk policies.
Support hybrid scenarios involving Entra Connect or Cloud Sync, on-premises Active Directory, Group Policy, and hybrid Exchange.
Run current-state assessments and produce findings, recommendations, and roadmaps.
Automate configuration and reporting with PowerShell and Microsoft Graph.
Lead working sessions and workshops with client IT and security stakeholders.
Explain how Microsoft 365 controls map to frameworks such as NIST CSF, CIS Benchmarks, and ISO 27001.
Present recommendations and trade-offs clearly to technical and non-technical audiences.
Write design documents, runbooks, status updates, and executive summaries.
Manage individual tasks and timelines, and raise risks early.
Contribute reusable templates, scripts, and standard policy frameworks.
Stay current on the Microsoft security roadmap and share learnings with the team.