Systems Engineer – Microsoft 365 Security, Compliance, Endpoint Security

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $107.9k - $195.1k / year

⏰ Full Time

🟠 Senior

🔴 Lead

⚙️ Systems Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Lead development, implementation, and ongoing management of M365 security policies, standards, and technical guardrails aligned to federal requirements • Own data protection governance including classification, labeling, retention, and DLP using Microsoft Purview • Define and enforce Exchange Online email security, encryption, sensitivity labeling, and secure mail flow policies • Implement and maintain S/MIME and/or Microsoft Information Protection email encryption • Administer and monitor anti-spam, anti-phishing, and anti-malware protections • Engineer and validate device-compliance-based Conditional Access policies across Windows, macOS, and mobile platforms • Investigate and remediate Conditional Access failures, identity anomalies, and external/guest access issues • Design, test, and deploy Intune configuration and compliance policies, Enrollment Status Pages, and OOBE workflows • Develop remediation scripts and configuration profiles to close compliance gaps and enforce security baselines • Coordinate urgent vulnerability mitigations, vendor fixes, vulnerability reviews, and baseline rebuilds • Establish and operate risk management across the M365 ecosystem • Support ATO and control assessments by drafting statements, collecting artifacts, and providing audit evidence • Lead Microsoft Defender and Microsoft Sentinel integration and operational management for threat detection and response • Build and maintain SIEM connectors and third-party log ingestion pipelines using Azure Function Apps • Tune audit retention, analytic rules, and alert logic • Provide Tier 3 troubleshooting for device, identity/access, telemetry, and OS/app protection issues • Partner with cross-functional teams, provide technical leadership, and support operational reviews • Stay current on M365 security/compliance updates and drive security posture and operational-efficiency improvements • Review incidents, telemetry gaps, compliance drift, CAP failures, and OS regressions • Build/test remediation scripts, deploy/test Intune profiles, troubleshoot Microsoft/Purview/Copilot/Okta issues, conduct investigations, validate CAP behavior, prepare ATO evidence, and update Jira/Confluence/CR documentation

🎯 Requirements

• Bachelors Degree and 8+ years of experience; 4 additional years of experience may be substituted in lieu of degree • Must be a US Citizen or US Person • Ability to obtain a Public Trust level 5 clearance • Deep experience with Microsoft Defender (XDR, Endpoint, Cloud Apps) • Hands-on experience with Sentinel SIEM and cross-platform telemetry pipelines • Expert-level Intune engineering across Windows/macOS/iOS/iPadOS • Advanced PowerShell for remediation, automation, and OS image manipulation • Strong understanding of CAP architecture and identity risk enforcement • Experience with ATO control evidence, compliance mapping, and audit support • Growth mindset and willingness to learn emerging security domains • Strong cross-team collaboration • Excellent communication, documentation, and user-impact translation • High reliability, ownership, and situational awareness during high-severity events • Preferred: federal security, high-compliance, or high-assurance environments • Preferred: Jamf, Okta connectors, Copilot audit logging, Graph API operations • Preferred: mSCP baseline engineering, macOS security hardening, and enterprise-wide Conditional Access enforcement