Microsoft Security Engineer (Purview)

About the role

The Microsoft Security Engineer will support a US‑based engagement focused on assessing and improving the client’s Active Directory, Azure/Entra ID, and Microsoft Purview environments. The role involves identifying configuration gaps, recommending remediation, and helping define resources, skills, and budgets for remediation activities.

Key responsibilities

• Assess the current state of Active Directory and Azure/Entra ID, including forest, site, domain, OU, security group, authentication, and group policy design.
• Manage migration of data governance and compliance frameworks to Microsoft Purview.
• Run PowerShell queries and SailPoint reports to gather statistics and ownership information for AD objects.
• Review AD configurations, processes, and documentation to understand the operating model.
• Identify, prioritize, and recommend solutions for configuration and operational gaps.
• Evaluate and improve processes for AD group, policy, and account management.
• Determine required resources, skills, and budget for remediation milestones.

Required profile

• Strong experience as an Active Directory architect, including domain consolidation and enterprise identity reviews.
• Hands‑on knowledge of Azure/Entra ID and hybrid identity environments.
• Proven ability to run and interpret PowerShell queries against AD domains.
• Experience with Microsoft Purview and data governance initiatives.

Required skills

• Active Directory (forest, site, domain, OU, security groups, group policy)
• Azure AD / Entra ID
• Microsoft Purview
• PowerShell scripting
• SailPoint reporting
• ADUC (Active Directory Users & Computers)
• ManageEngine
• StealthAUDIT