Security Engineer

We are seeking a detail-oriented, responsible and proactive Security Engineer to help secure our client's Microsoft 365 cloud services and physical computer endpoints, with special emphasis on identity, access, data and endpoint protection in a hybrid Windows domain/Microsoft Azure environment. The ideal candidate will have experience Microsoft Purview and This is a 6 month contract to start, hybrid (3 days in office) in Scarborough, Ontario, looking for a candidate available to start working immediately.

Key Responsibilities

Provide pro-active user account management to ensure access is promptly revoked upon employment termination.

Design, test, and implement global OS and third-party application patch deployments using Intune and other available tools for zero-day vulnerability mitigation.

Design, test, and implement Microsoft Entra Conditional Access Policies to ensure secure access to M365 cloud resources.

Manage email (Exchange Online) and Teams collaboration security, including but not limited to Defender for O365 Threat and Alert policies, Allow/Block lists, transport rules and other tools.

In collaboration with our security partners and in-house IT teams, respond to IT security incidents and take immediate actions to resolve and mitigate threats.

Enforce the principle of Least Privilege within the IT environment, using Microsoft IAM and PIM framework.

Implement and monitor Microsoft Purview Information Protection to secure data on endpoints and in the cloud, preventing unauthorized data sharing or exfiltration.

Maintain and document general Client IT security controls, policies, and procedures.

Recommend improvements to Client's IT Security posture.

Perform risk assessments and recommend mitigation strategies in accordance with IT security best practices.

Stay up to date on emerging threats, vulnerabilities, and technologies, including AI-driven.

Collaborate with IT teams to ensure secure system, network and server configurations.

Assist with compliance efforts (e.g., ISO 27001, NIST, GDPR, HIPAA).

Required Qualifications

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field

5-7 years of experience in Azure/Microsoft 365 administration and information security roles

Significant experience with Microsoft 365/Azure security tools (Sentinel SIEM, Defender for Cloud and Endpoint, etc.)

Strong understanding of email transport and security protocols (e.g. SMTP, SPF, DKIM, DMARC)

Proven practical experience securing M365/Azure environment with MFA and Conditional Access Policies

Proven practical experience deploying Intune endpoint and patch management policies and scripts

Experience with Data Loss Prevention and eDiscovery using Microsoft Purview

Familiarity with common attack vectors (phishing, malware, ransomware) and their mitigation and remediation techniques

Good understanding of TCP/IP network protocol stack and OSI model

Strong knowledge of scripting languages (M365/Azure PowerShell and Graph API proficiency mandatory)

Preferred Qualifications

Certifications such as:

Microsoft 365 Certified: Administrator Expert or Associate

CompTIA Security+

Certified Information Systems Security Professional (CISSP)

Certified Ethical Hacker (CEH)

GIAC certifications

Experience with network packet sniffing and analysis tools

Experience with other SIEM tools

Understanding of MacOS / iOS / Android security concepts, challenges and remediations

Key Skills

Analytical and problem-solving skills

Attention to detail

Strong people and communication skills

Incident response and troubleshooting

Risk assessment and threat analysis

Working Conditions

Full-time contract, onsite

May require after hours on-call availability for incident response

Fast-paced, high-responsibility environment

📌 Our specialized recruiting professionals apply their expertise and utilize our proprietary AI to find you great job matches faster. This job posting is for a current vacancy with our client