Full-Time MSP Engineer - Microsoft CyberSecurity (CMMC Level 2)

• Operate & secure Microsoft estates
• Monitor, triage, and resolve incidents across Defender (Endpoint/Identity/Office/Cloud) and Microsoft Sentinel; tune analytics rules, KQL queries, and playbooks.
• Manage Entra ID (PIM, Conditional Access, MFA), Intune (compliance, baselines, hardening), and Purview (labels/DLP/insider risk).
• Maintain secure configurations for Azure and common on‑premises integrations.

• Map operational work to NIST 800‑171 practices; capture evidence automatically where possible.
• Contribute to control runbooks, SOPs, and customer artifacts.
• Support GCC High tenants and Azure Government as needed

• Build Azure Logic Apps/Power Automate playbooks, RMM scripts/policies, and n8n flows to eliminate manual steps.
• Use PowerShell (and, when appropriate, Graph API, KQL, Bicep/Terraform) to codify repeatable operations.
• Measure results and iterate.

• Work tickets to SLA; document root cause and preventive actions.
• Participate in on‑call rotation for priority incidents.
• Contribute to QBRs with concise ops/health summaries and recommendations.

• 4+ years in an MSP or enterprise operations role supporting Microsoft 365/Azure security.
• Hands‑on with Defender, Sentinel, Entra ID, Intune, and Purview
• Automation experience in at least one of: Azure Logic Apps / Power Automate, RMM, or n8n
• PowerShell proficiency; able to read/write scripts for ops at scale.
• Solid ticket hygiene and service‑management discipline
• Strong written documentation and clear customer communication.

• Practical understanding of CMMC Level 2 (or NIST 800‑171).
• Experience with Azure Government and Microsoft GCC High operations.
• KQL detection engineering; Sentinel content management at scale.

What is the last date for applying to the job?

Which countries are accepted for this remote job?