Microsoft Security Engineer (Healthcare) 100% Remote

About the role

Short-term (60-day), hands-on execution role — a "doer" level security engineer to supplement and work under the direction of the IT Manager. Deliverables are configured systems, tested controls, vendor/solution recommendations, and documentation.

Key responsibilities

• Update M365 configurations for improved security posture, enhance Conditional Access policies, implement email encryption requirements, and implement data protection and retention requirements (PHI flagging via Purview)
• Lead discussion on eliminating shared account usage
• Configure and tune Defender for Office 365 anti-phishing policies (anti-spoofing, impersonation protection, Safe Links, Safe Attachments)
• Review and harden Defender for Endpoint anti-malware policies on Windows devices
• Assess current backup coverage for M365 data (Exchange, SharePoint, OneDrive, Teams) and endpoints
• Implement Microsoft-native backup (e.g., Microsoft 365 Backup / Azure Backup) for M365 data and endpoints
• Define backup and restore-testing procedures: schedule, scope, and success criteria
• Conduct first scheduled restore test; document results and remediate any gaps found
• Document backup and restore procedures for IT Manager handoff
• Review existing M365 licensing and transition to Enterprise-level licensing, define standard roles and corresponding license requirements, and engage Microsoft Partner for licensing guidance

About you

• Microsoft CA / Conditional Access: designing, testing, and hardening CA policies in a production tenant
• Microsoft Entra ID MFA/SSO: Authenticator and EntraID SSO setup/configuration/rollout
• Microsoft Purview: DLP, sensitivity labels, PHI/PII classification, and data retention policy configuration
• Microsoft Defender (Endpoint, Office 365): configuration and tuning for anti-malware and anti-phishing
• Third-party EDR/XDR: hands-on evaluation and deployment experience (e.g., SentinelOne, etc.) alongside/replacing Defender
• Microsoft Intune: policy authoring, endpoint compliance baselines, and software/agent deployment to Windows devices
• M365 licensing: working knowledge of Business Premium vs. Enterprise (E3/E5) feature sets; experience engaging Microsoft Partners/CSPs
• SIEM: evaluation and selection experience (Microsoft Sentinel or equivalent) for a mid-market environment
• Vendor coordination: comfortable working with resellers/distributors and Microsoft Partner contacts to source solutions
• Works independently with light oversight; strong written documentation habits; able to hand off configuration/runbooks to IT Manager and support team