Associate – Microsoft 365 Security Engineer

RSM US LLP

. Design, deploy and advise on Microsoft 365 security solutions for clients .

Posted 10/28/2026full-timeUnited StatesJuniorMid-Level💰 $62,800 - $103,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and deploying Microsoft 365 security solutions, including Microsoft Defender XDR, Entra ID, Intune, and Microsoft Purview. Proficient in implementing security frameworks, managing hybrid environments, and automating processes with PowerShell.

Highest-signal resume keywords

Microsoft 365 Security Solutions DesignMicrosoft Defender XDREntra IDMicrosoft IntunePowerShell Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft Defender XDREntra IDMicrosoft IntuneMicrosoft PurviewActive DirectoryPowerShellZero TrustIdentity And Access ManagementData ClassificationEndpoint Protection

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationClient Engagement

Tools & Technologies

Microsoft GraphMicrosoft SentinelSIEM PlatformsExchange ServerGCC High Environments

Certifications & Qualifications

SC-300SC-200SC-401MS-102AZ-500SC-900MS-900Security+CISSPCCSP

Industry Keywords

Hybrid IdentityDirectory SynchronizationAuthentication MethodsConditional AccessPrivileged Identity ManagementData Loss PreventionRetention PoliciesInsider Risk PoliciesNIST CSFCIS Benchmarks

Tech Stack

Tools & technologies

CloudCyber SecurityDNS

About the role

Key responsibilities & impact

Design, deploy and advise on Microsoft 365 security solutions for clients
Work across Microsoft Defender XDR, Entra ID, Microsoft Intune and Microsoft Purview in hybrid and full-cloud environments
Lead technical conversations and translate security frameworks into practical Microsoft 365 configurations
Plan, configure and deploy security solutions across Defender XDR, Entra ID, Intune and Microsoft Purview
Design and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies
Build Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies
Support hybrid scenarios involving Entra Connect / Cloud Sync, on-premises Active Directory, Group Policy and hybrid Exchange
Run current-state assessments and produce findings, recommendations and roadmaps
Automate configuration and reporting with PowerShell and Microsoft Graph
Lead working sessions and workshops with client IT and security stakeholders
Explain how Microsoft 365 controls map to NIST CSF, CIS Benchmarks and ISO 27001
Present recommendations and trade-offs to technical and non-technical audiences
Write design documents, runbooks, status updates and executive summaries
Manage tasks and timelines, raise risks early, and contribute reusable templates, scripts and policy frameworks
Stay current on the Microsoft security roadmap and share knowledge with the team

Requirements

What you’ll need

2+ years of hands-on IT or security experience, ideally in Microsoft environments
Strong written and verbal communication skills
Practical experience with at least two of: Microsoft Defender XDR, Entra ID, Microsoft Purview, Intune
Working knowledge of Active Directory, DNS, Group Policy, Windows Server and ideally Exchange Server
Understanding of hybrid identity, including directory synchronization and authentication methods
Familiarity with PowerShell for administration and scripting
Working knowledge of Zero Trust, least privilege, identity and access management, data classification and endpoint protection
Ability to travel occasionally to client sites
Bachelor's degree in information technology, cybersecurity, computer science or a related field, or equivalent work experience (preferred)
Microsoft certifications such as SC-300, SC-200, SC-401, MS-102, AZ-500, SC-900 or MS-900, or willingness to obtain within 3 months (preferred)
Broader security certifications such as Security+, CISSP or CCSP (preferred)
Prior consulting or managed services experience across multiple client tenants (preferred)
Experience with Intune and device compliance as it relates to Conditional Access (preferred)
Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules (preferred)
Exposure to Microsoft Sentinel or other SIEM platforms (preferred)
Experience in GCC or GCC High environments (preferred)
Familiarity with Copilot and AI data security considerations in Microsoft 365 (preferred)
Must not require sponsorship now or in the future for entry-level hiring; F-1 visa holders are excluded

Benefits

Comp & perks

Competitive benefits and compensation package
Hybrid workstyle with in-person connection and office alignment
Reasonable accommodation for applicants with disabilities