[Hiring] Senior Security Engineer @Southern New Hampshire University

Role Description

The Senior Security Engineer, Microsoft Stack will report to the Deputy Chief Information Security Officer. In this role, you will be a hands-on engineering role accountable for implementing, operating, and continuously improving SNHU's Microsoft security platforms. The role is the primary technical owner of Microsoft Defender XDR and contributes Microsoft platform expertise to Defender for Cloud, Microsoft Entra ID, Intune, and Purview in partnership with the teams that own them.

The position exists to turn SNHU's security requirements and Zero Trust strategy into working, measurable controls protecting learners and employees across Azure, Microsoft 365, and hybrid infrastructure. The work divides roughly into:

• Driving use of Microsoft tools
• Automation that removes repetitive operational effort
• Partnership with other teams on addressing security control gaps

You will work 100% remotely from any of our approved states.

What you'll do:

• Engineer and implement integrated security controls across Microsoft Defender XDR, Microsoft Entra ID Protection, App Governance, Intune, and Microsoft Purview Insider Risk Management, Data Loss Prevention, and Data Security Posture Management.
• Reduce identity, endpoint, application, cloud, and data risk through secure configuration, attack-surface reduction, automated response, and continuous validation of control effectiveness.
• In partnership with IAM, engineer identity security controls in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management, access reviews, workload identities, and hybrid identity protections.
• Test every policy change in a non-production tenant before promoting it to production.
• Build production-quality security automation using PowerShell, Microsoft Graph, KQL, and REST APIs.
• Deploy repeatable configurations as code through Bicep or Terraform in CI/CD pipelines.
• Integrate Microsoft security telemetry with SNHU's SIEM, SOAR, IT service management, and threat intelligence platforms.
• Troubleshoot cross-platform issues through to permanent resolution.
• Serve as the security engineering point of contact with Microsoft, assessing roadmap changes, feature releases, and deprecations for their impact on SNHU controls.
• Support partner-owned Microsoft platforms by supplying configuration expertise, review, and testing.
• Document every implementation as diagrams, configuration standards, runbooks, test results, and as-built records.
• Provide control evidence supporting audit, control testing, and compliance activities.
• Mentor engineers through configuration review, pair troubleshooting, and design feedback.
• Escalate material control deficiencies to Security Architecture and leadership for prioritization.
• Other duties and responsibilities as assigned.

Qualifications

• 7+ years of experience in cybersecurity, cloud engineering, identity, endpoint management, or infrastructure engineering.
• 3+ years in the most recent Microsoft security platforms in an enterprise environment.
• Bachelor's degree in information technology, computer science, information security or related discipline or equivalent years of experience acceptable.
• Microsoft certifications: SC-200, SC-300, AZ-500, or SC-100.
• Industry certifications: CISSP, CCSP, GIAC, or equivalent.
• Hands-on experience with Microsoft Defender XDR, Microsoft Intune, or Microsoft Azure.
• Infrastructure as code using Bicep, ARM templates, or Terraform within a CI/CD pipeline.
• Python or a second automation or scripting language.
• Microsoft Entra ID, Conditional Access, and modern authentication protocols including OAuth 2.0, OpenID Connect, SAML, and Kerberos.
• Microsoft 365 and Azure security configuration and governance controls.
• Windows, Active Directory, networking fundamentals, certificates, and encryption.
• Logging and telemetry pipelines, detection engineering, and incident response practice.
• Zero Trust, least privilege, defense in depth, and risk-based decision-making.
• PowerShell at a production scripting level.
• Kusto Query Language for detection authoring and investigation.
• Microsoft Graph and REST API integration.
• Version control and change management discipline, including Git-based workflows.
• Clear technical writing for runbooks, standards, and control evidence.

Benefits

• High-quality, low-deductible medical insurance.
• Low to no-cost dental and vision plans.
• 5 weeks of paid time off (plus almost a dozen paid holidays).
• Employer-funded retirement.
• Free tuition program.
• Parental leave.
• Mental health and wellbeing resources.

Compensation

The annual pay range for this position is $106,684.00 - $170,727.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $117,887.00 - $159,493.00.