Microsoft Security Engineer (Purview)

About the role

The Microsoft Security Engineer will support a US‑based client engagement focused on assessing and improving their Active Directory, Azure/Entra ID, and Microsoft Purview environments. You will evaluate the current identity infrastructure, identify gaps, and provide actionable recommendations to mitigate critical risks.

Key responsibilities

• Assess the client’s AD and Azure/Entra ID deployment, covering forest, site, domain, OU, security group, authentication, and group‑policy design.
• Manage migration of data‑governance and compliance frameworks to Microsoft Purview.
• Run PowerShell queries and SailPoint reports to gather statistics and ownership information for AD/Azure objects.
• Review existing AD configurations, processes, and documentation to understand the operating model.
• Identify, prioritize, and recommend remediation for configuration and operational gaps.
• Evaluate and improve AD group, policy, and account management processes.
• Define required resources, skills, and budget for remediation activities.

Required profile

• Strong experience as an Active Directory architect, including domain consolidation and enterprise identity reviews.
• Hands‑on knowledge of AD forest, site, domain, OU, security group, authentication, and group‑policy design.
• Experience assessing Azure/Entra ID and hybrid identity environments.
• Ability to interpret PowerShell query results and produce actionable insights.

Required skills

• Active Directory (AD)
• Azure/Entra ID
• Microsoft Purview
• PowerShell
• SailPoint
• ADUC (Active Directory Users and Computers)
• ManageEngine
• StealthAUDIT
• AD scanning utilities