Associate – Microsoft 365 Security Engineer (Microsoft 365)

Location: Chicago, Iowa City, Cedar Rapids, Davenport, or Dubuque; hybrid workstyle aligned to an hirify.global office with occasional travel to client sites.

Salary: $62,800–$103,400 per year.

Company

hirify.global provides professional services to middle-market clients globally.

What you will do

• Plan, configure, deploy, and advise on Microsoft 365 security solutions across Defender XDR, Entra ID, Intune, and Microsoft Purview.
• Design Conditional Access, Privileged Identity Management, MFA, identity protection, sensitivity labeling, DLP, retention, and insider risk controls.
• Support hybrid identity and infrastructure scenarios involving Entra Connect or Cloud Sync, Active Directory, Group Policy, Windows Server, and hybrid Exchange.
• Run current-state assessments and produce findings, recommendations, roadmaps, design documents, runbooks, status updates, and executive summaries.
• Lead client workshops, explain how M365 controls map to NIST CSF, CIS Benchmarks, and ISO 27001, and present recommendations to technical and non-technical stakeholders.
• Automate configuration and reporting with PowerShell and Microsoft Graph while contributing reusable scripts, templates, and policy frameworks.

Requirements

• 2+ years of hands-on IT or security experience, ideally in Microsoft environments.
• Practical experience with at least two of Microsoft Defender XDR, Entra ID, Microsoft Purview, and Intune.
• Working knowledge of on-premises infrastructure, including Active Directory, DNS, Group Policy, Windows Server, and ideally Exchange Server.
• Understanding of hybrid identity, directory synchronization, and authentication methods.
• Familiarity with PowerShell for administration and scripting.
• Working knowledge of Zero Trust, least privilege, identity and access management, data classification, and endpoint protection.
• Strong written and verbal communication, client focus, initiative, independent problem-solving, and the ability to explain technical and business implications.
• Ability to travel occasionally to client sites.

Nice to have

• Bachelor’s degree in information technology, cybersecurity, computer science, or a related field, or equivalent work experience.
• Microsoft certifications such as SC-300, SC-200, SC-401, MS-102, AZ-500, SC-900, or MS-900, or willingness to obtain one within 3 months.
• Security+, CISSP, or CCSP certification or progress toward CISSP.
• Consulting or managed services experience across multiple client tenants; experience with Intune device compliance and Conditional Access.
• Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules.
• Exposure to Microsoft Sentinel or other SIEM platforms, GCC or GCC High environments, and Copilot or AI data security considerations in Microsoft 365.

Culture & Benefits

• Full-time employment with a hybrid workstyle combining office presence and in-person collaboration based on client, team, and development needs.
• Competitive benefits and compensation package.
• hirify.global provides reasonable accommodation during the recruitment process.
• hirify.global does not intend to hire entry-level candidates who require visa sponsorship now or in the future; F-1 visa holders are specifically excluded from this hiring intent.