Microsoft Identity and Cloud Security Administrator

Mercantile Bank•Wyoming, MI

About The Position

As a Microsoft Identity and Cloud Security Administrator, you'll help protect Mercantile Bank's relationship-driven, community-focused work by keeping our Microsoft 365 environment secure, reliable, and ready for the people who depend on it every day. This is a role for someone who enjoys solving problems, building trust, and partnering across teams-not just closing tickets. Our technology team is service-minded, curious, and practical. We care about doing things the right way the first time, communicating clearly, following up quickly, and speaking up when something does not look right. In this role, you'll help advance the team's goals of strengthening security, improving efficiency, supporting automation, and creating dependable technology experiences for employees and customers. You'll work closely with Information Security and IT partners to reduce risk, improve controls, support compliance, and contribute to secure operations that make a meaningful difference in the communities Mercantile Bank serves. This position requires advanced expertise in Microsoft security engineering, identity governance, threat protection, and Zero Trust architecture.

Requirements

5+ years of hands-on experience securing Microsoft environments, including Microsoft Entra ID, Microsoft Defender, Microsoft Purview, Exchange Online, Intune, and Microsoft 365 security services
Demonstrated expertise implementing and managing identity security controls, including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, Authentication Strengths, and Zero Trust security architectures.
Strong organization and attention to detail across concurrent work.
Analytical, proactive problem-solving; sound judgment when something "doesn't look right."
Ability to prioritize effectively, communicate clearly, and delegate when appropriate.
A service-focused mindset, curiosity for continuous improvement, and commitment to supporting secure, reliable banking.

Responsibilities

Design, implement, and continuously improve Microsoft Entra security controls, including Conditional Access, Identity Protection, Authentication Strengths, Passwordless Authentication, External Identities, and Zero Trust security architecture.
Administer and govern privileged access across the Microsoft ecosystem, including Entra PIM, Privileged Access Groups, Access Reviews, Entitlement Management, Lifecycle Workflows, and least-privilege access models.
Manage and optimize Microsoft Defender security platforms, including Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender XDR to detect, want partner with Information security to investigate, and remediate cyber threats.
Work directly with Information Security Team to lead Microsoft 365 security governance and data protection initiatives utilizing Microsoft Purview, Data Loss Prevention (DLP), Sensitivity Labels, Insider Risk Management, eDiscovery, Information Protection, and compliance controls.
Serve as the organization's subject matter expert for Microsoft security technologies, providing strategic recommendations, security architecture guidance, threat mitigation expertise, and best practices related to Microsoft 365 E5, Microsoft Entra Suite, and advanced Microsoft security capabilities.
Reviewing overnight alerts, security dashboards, patch or vulnerability items, and identity signals to identify what needs attention, what can be improved, and where follow-up is needed.
Refining Microsoft Defender policies, reviewing Entra ID access controls, supporting eDiscovery requests in Purview, documenting decisions for audit readiness, or partnering with Information Security to reduce risk and strengthen controls.
Collaborate regularly with teammates, IT leadership, vendors, and business partners to keep work moving from planning through rollout.
Calm problem-solving and quick prioritization; improving processes, sharing knowledge, and helping the broader technology team build secure, dependable systems that support meaningful work in the communities Mercantile Bank serves.