Microsoft 365 Security Implementation Specialist - Quezon City

Salary: Php 110,000 - Php 137,500

Please access the link below to apply.

https://www.careers-page.com/hirearchi/job/V6W46R3R

Position Summary

The ideal candidate will have deep expertise in Microsoft Intune, Defender for Endpoint, Conditional Access, and compliance frameworks, with a proven track record of successful security implementations in enterprise environments.

Key Responsibilities

• Design and deploy comprehensive Zero Trust security models using Microsoft 365 security suite
• Configure identity-centric security controls leveraging Microsoft Entra ID (Azure AD) capabilities
• Implement least-privilege access models with Just-In-Time (JIT) and Privileged Identity Management (PIM)
• Establish micro-segmentation strategies and network security boundaries

• Deploy and configure Microsoft Intune for comprehensive Mobile Device Management (MDM) and Mobile Application Management (MAM)
• Implement Windows Autopilot for zero-touch device provisioning and configuration
• Configure device compliance policies aligned with CIS Controls and security baselines
• Deploy and optimize Microsoft Defender for Endpoint across hybrid environments
• Establish endpoint detection and response (EDR) capabilities with automated remediation

• Design and implement Conditional Access policies based on risk assessment and organizational requirements
• Configure Multi-Factor Authentication (MFA) and passwordless authentication methods
• Deploy identity protection policies and risk-based access controls
• Integrate identity governance with automated access reviews and lifecycle management

• Configure Microsoft Defender for Cloud Apps (CASB) for Shadow IT discovery and control
• Implement Data Loss Prevention (DLP) policies across Microsoft 365 services
• Deploy Microsoft Purview for data governance, classification, and compliance management
• Ensure alignment with CIS 18 Critical Security Controls and other regulatory frameworks
• Configure security monitoring and automated alerting systems

• Develop PowerShell scripts and Microsoft Graph API integrations for security automation
• Integrate Microsoft security solutions with existing SIEM/SOAR platforms
• Create custom security workflows and incident response playbooks
• Implement Infrastructure as Code (IaC) for consistent security deployments

• Apply NIST Cybersecurity Framework and CMMC requirements to Microsoft 365 implementations
• Develop security configuration baselines and hardening guides
• Create comprehensive technical documentation and security procedures
• Conduct security assessments and gap analyses against industry frameworks

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience)
• 3-5 years for mid-level positions; 5-8+ years for senior-level positions of hands-on experience with Microsoft 365 and Azure security technologies
• Demonstrated experience implementing security solutions in enterprise environments (1,000+ users)
• Proven track record of successful Microsoft security tool deployments and configurations

• Expert-level proficiency in Microsoft Intune/Endpoint Manager configuration and deployment
• Advanced knowledge of Microsoft Defender suite (Defender for Endpoint, Office 365, Cloud Apps)
• Strong experience with Conditional Access policy design and implementation
• Hands-on expertise with Microsoft Entra ID (Azure AD) and identity management
• PowerShell scripting capabilities for automation and bulk operations
• Understanding of networking fundamentals and security principles
• Experience with security compliance frameworks, particularly CIS Controls

Preferred Qualifications

• SC-300: Microsoft Identity and Access Administrator Associate
• SC-200: Security Operations Analyst Associate
• AZ-500: Azure Security Engineer Associate
• SC-100: Cybersecurity Architect Expert (for senior roles)
• MD-102: Endpoint Administrator Associate
• MS-102: Microsoft 365 Administrator Expert

• Experience with Zero Trust implementation and architecture
• Knowledge of additional compliance frameworks (NIST 800-171, CMMC, ISO 27001)
• Familiarity with Microsoft Sentinel and KQL (Kusto Query Language)
• Experience with hybrid cloud environments and multi-cloud security
• Understanding of DevSecOps practices and Infrastructure as Code (Terraform, ARM templates)
• Integration experience with third-party security tools and SIEM platforms

• Strong analytical and problem-solving abilities
• Excellent written and verbal communication skills for technical and executive audiences
• Ability to manage multiple implementation projects simultaneously
• Experience working in cross-functional teams and hybrid work environments
• Client-facing consulting experience (for senior positions)
• Security-first mindset with attention to detail

1. 13th Month pay
2. HMO Allowance
3. SSS/Philhealth/Pag-Ibig Allowance
4. Health & Wellness Allowance