Sr IT Engineer - M365 Platform Protection & Data Governance

Supermicro•San Jose, CA

About The Position

Why This Role Matters: Maximize Microsoft 365 E5 Value: Expand and operationalize Defender, Purview, application governance, and data protection capabilities already available in the enterprise platform. Strengthen Preventive Platform Controls: Configure and optimize Microsoft protection and governance technologies from a systems-management perspective. Enable Cross-Team Governance: Translate security, compliance, legal, and business requirements into maintainable Microsoft 365 and Entra technical controls.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field (preferred).
8+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
Proven hands-on experience with Microsoft 365 and Entra ID in an enterprise environment.
Hands-on experience with Microsoft Defender technologies such as Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, or Defender for Office 365.
Experience with Microsoft Purview capabilities such as Information Protection, sensitivity labels, DLP, retention, Audit, eDiscovery, and data lifecycle management.
Understanding of Entra Enterprise Applications, app registrations, service principals, OAuth permissions, application consent, and SaaS application governance.
Scripting and automation skills with PowerShell and Microsoft Graph API.
Understanding of identity, endpoint, messaging, collaboration, data protection, access control, and encryption technologies.
Experience implementing technical controls based on security, compliance, audit, or regulatory requirements.

Nice To Haves

Relevant Microsoft security, compliance, identity, or Microsoft 365 certifications are preferred.

Responsibilities

Administer and optimize Microsoft Defender XDR platform configuration and integrations across the Microsoft 365 environment.
Manage technical configuration and integration for Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 in coordination with related platform owners.
Implement preventive platform controls, configuration baselines, posture improvements, and cross-product protection integrations.
Administer SaaS and cloud application governance capabilities, including connected applications, OAuth permissions, application consent, risky applications, service principals, and application hygiene in coordination with the Entra/Identity team.
Administer Microsoft Purview Information Protection, including sensitivity labels, encryption, sensitive information types, classifiers, and automated labeling capabilities.
Design, implement, and maintain Data Loss Prevention policies across Exchange, Teams, SharePoint, OneDrive, endpoints, and other supported Microsoft services.
Administer retention, Data Lifecycle Management, Records Management, Audit, and eDiscovery platform configuration.
Review Secure Score and related Microsoft recommendations, assess applicability, and coordinate technical remediation with appropriate service owners.