Systems Engineer – Microsoft 365 Security, Compliance, Endpoint Security Engineer

🕒 August 27

🇺🇸 United States – Remote

💵 $107.9k - $195.1k / year

⏰ Full Time

🟠 Senior

🔴 Lead

⚙️ Systems Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 33%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Lead development, implementation, and management of M365 security policies, standards, and technical guardrails aligned with federal requirements • Govern Microsoft Purview data protection capabilities, including classification, labeling, retention, and DLP • Define and enforce Exchange Online email security, encryption, sensitivity labeling, and secure mail-flow policies • Implement and maintain S/MIME and/or Microsoft Information Protection email encryption • Administer and monitor anti-spam, anti-phishing, and anti-malware protections • Engineer and validate device-compliance-based Conditional Access policies across Windows, macOS, and mobile platforms • Investigate and remediate Conditional Access failures, identity anomalies, and external or guest access issues • Design, test, and deploy Intune configuration and compliance policies, Enrollment Status Pages, and OOBE workflows • Develop remediation scripts and configuration profiles to close compliance gaps and enforce security baselines • Coordinate urgent vulnerability mitigations, vendor fixes, vulnerability reviews, and baseline rebuilds • Establish and operate risk management across the M365 ecosystem • Support ATO and control assessments by drafting implementation statements, collecting artifacts, and providing audit evidence • Lead Microsoft Defender and Microsoft Sentinel integrations and operational management for threat detection, alerting, and response • Build SIEM connectors and ingestion pipelines for M365, collaboration, identity, and third-party logs • Tune audit retention, analytic rules, and alert logic • Provide Tier 3 troubleshooting for device compliance, identity/access, telemetry, and OS/application protection issues • Partner with cross-functional teams, provide technical leadership, and support enterprise syncs and operational reviews • Stay current on M365 security and compliance updates and drive security posture and operational-efficiency improvements • Review incidents, telemetry gaps, compliance drift, CAP failures, EMM issues, and OS update regressions • Build and test remediation scripts, deploy Intune profiles, troubleshoot Microsoft support cases, conduct investigations, validate Conditional Access, prepare ATO evidence, update Jira and Confluence, and submit change requests

🎯 Requirements

• Bachelor's degree and 8+ years of experience; 4 additional years of experience may be substituted in lieu of degree • Must be a US Citizen or US Person • Ability to obtain a Public Trust level 5 clearance • Deep experience with Microsoft Defender (XDR, Endpoint, Cloud Apps) • Hands-on experience with Sentinel SIEM and cross-platform telemetry pipelines • Expert-level Intune engineering across Windows/macOS/iOS/iPadOS • Advanced PowerShell for remediation, automation, and OS image manipulation • Strong understanding of CAP architecture and identity risk enforcement • Experience with ATO control evidence, compliance mapping, and audit support • Growth mindset and willingness to learn emerging security domains • Strong cross-team collaboration with Cyber, Ops, EA, ICAM, and Comms • Excellent communication, documentation, and user-impact translation • High reliability, ownership, and situational awareness during high-severity events • Prior experience in federal security, high-compliance, or high-assurance environments preferred • Experience with Jamf, Okta connectors, Copilot audit logging, and Graph API operations preferred • Experience with mSCP baseline engineering and macOS security hardening preferred • Prior involvement in enterprise-wide Conditional Access enforcement preferred

🏖️ Benefits

• Camera-on interview identification photo if an offer letter is extended • Potential eligibility for a Public Trust level 5 clearance