Microsoft 365 Security Engineer

Job Description

Microsoft 365 Security Engineer (Purview, Intune, MDM) – Contract

Drive a high-impact Microsoft 365 security implementation from day one.

Join a focused initiative to design and deploy enterprise-grade data protection, device management, and security solutions. This is a hands-on role ideal for an engineer who thrives in execution-driven projects and enjoys building scalable environments with clear documentation.

Location: Remote (with potential limited on-site support for device-related work)

Job Details

• Pay: $70–$80/hour
• Contract Length: 3 months (implementation-focused engagement)
• Work Hours: Standard business hours
• Location: Remote-first, with possible site visits if needed
• Project Scope: Microsoft 365 Security Implementation

What You’ll Do

You will lead the build-out and deployment of Microsoft 365 security capabilities, ensuring solutions are implemented, tested, and documented for long-term success.

• Implement Microsoft Purview Data Loss Prevention (DLP) across cloud apps, endpoints, and file systems
• Design and deploy data classification and retention policies using Data Lifecycle Management
• Configure and manage Microsoft Intune for device enrollment, compliance, and security controls
• Support Apple device management via Apple Business Manager integration
• Assist with multi-factor authentication (MFA) and secure access configurations, including VPN use cases
• Test, monitor, and refine policies for effectiveness and usability
• Deliver clear documentation outlining configurations, workflows, and recommendations

Key Focus Areas

Microsoft Purview (DLP & Data Lifecycle Management)

• Configure DLP policies across Microsoft 365 and endpoints
• Establish sensitive data classifications
• Define and deploy retention labels and policies
• Continuously refine policies based on business needs

Mobile Device Management (Microsoft Intune)

• Enroll and manage Windows and Apple devices
• Configure compliance policies, security baselines, and application controls
• Support automated enrollment through Apple Business Manager
• Align with hybrid identity environments

File System Data Governance

• Implement governance and controls for file-based data
• Align on-premise data policies with cloud-based standards

Access Security & MFA

• Support implementation of MFA for email and remote access
• Assist with secure VPN configuration and enforcement

What You’ll Bring

• Hands-on experience with Microsoft Purview (DLP and Data Lifecycle Management)
• Strong expertise in Microsoft Intune and modern device management
• Experience with Apple Business Manager and cross-platform device enrollment
• Knowledge of identity and access management in hybrid environments
• Familiarity with endpoint security, MFA, and VPN solutions
• Ability to lead technical implementations independently
• Strong documentation and communication skills

Preferred Background

• Experience in short-term, delivery-focused implementation projects
• Exposure to regulated environments or data compliance requirements
• Familiarity with file server governance tools

Deliverables

• Fully implemented Microsoft 365 security solutions
• Tested and optimized configurations across all workstreams
• Clear, well-structured documentation (“blueprint”) for ongoing use

Why This Role

• End-to-end ownership of a high-visibility security transformation project
• Clearly defined scope with a strong focus on execution
• Flexible remote work with minimal travel requirements
• Opportunity to make an immediate and measurable impact