GuidePoint Security LLC

Microsoft Security Engineer- Remote (Anywhere in the U.S.)

Remote Security Engineering role with clear candidate location fit.

PostedJul 19, 2026

Eligible countries1 accepted country

Seniority signalMiddle

Work settingRemote

Accepted candidate locations

USA

Role overview

Readable role content extracted into sections for faster review.

Identity & Access (Entra ID / AD): Design and implement identity architecture, hybrid sync (Entra Connect), Conditional Access, MFA/passwordless, and identity governance (PIM, RBAC, access reviews, entitlement management).
Integrate applications via SSO (SAML/OIDC), enterprise app registrations, and SCIM provisioning.
Investigate and remediate identity risks using Entra ID Protection, sign-in and audit logs; drive hybrid identity hygiene (stale object cleanup, privileged account reduction, tiered admin models).
Data Security & Compliance (Purview): Design and implement sensitivity labels, DLP, and retention policies across M365; support data classification, information protection rollouts, and data security posture assessments.
Support eDiscovery, Insider Risk Management, communication compliance, and AI data security readiness (DSPM for AI) as engagements require.
Intune & Defender XDR: Configure device compliance, configuration profiles, and app deployments across platforms; support Defender for Endpoint, Office 365, Identity, and Cloud Apps in cloud and hybrid environments.
Other duties as assigned.
Adhere to GuidePoint Security Core Values.

Bachelor’s degree preferred.
2–5 years in IT administration, identity management, or security operations.
Hands-on production experience with Microsoft Entra ID and on-premises Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).
Knowledge of core authentication protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP.
Experience implementing Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery) and comfort supporting Intune and Defender XDR.
Basic PowerShell scripting for automation and reporting (e.g., Microsoft Graph PowerShell).
Strong troubleshooting skills, attention to detail, and clear written and verbal communication.
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Advanced AD work: multi-domain/forest design, migrations, tiered administration, legacy auth cleanup.
Microsoft Sentinel: log onboarding, detection development, or broader SIEM/SOAR experience.
Azure infrastructure and security (Azure Policy, network security, landing zones, RBAC).
SharePoint Online governance, Teams Voice, Power BI/Fabric, or Copilot Studio/Azure AI Foundry experience.

Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays and a Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option

Similar roles