Microsoft Cloud Security Engineer

- Manage Microsoft Intune for device provisioning, configuration, and lifecycle management - Design and oversee application deployment (Win32 apps, Microsoft 365 apps, updates) - Enforce device compliance policies and security standards - Standardize configurations across laptops, tablets, and mobile devices - Administer Microsoft Defender (Endpoint, Office 365, Identity) - Monitor, triage, and respond to security alerts and incidents - Implement and maintain endpoint protection and threat detection strategies - Manage Entra ID (Azure AD) users, groups, and access controls - Design and uphold Conditional Access policies - Support MFA and device-based access enforcement - Assist with configuration, troubleshooting, and optimization of Exchange Online, Teams, and SharePoint - Manage licensing and identify areas for optimization - Provide L2/L3 escalation support for endpoint and cloud-related challenges - Maintain documentation, standards, and procedures - Collaborate with IT team members on system enhancements and security initiatives - Work within a small, agile IT team with collective ownership and accountability - Partner with external providers, including MSPs and MSSPs, to bolster internal capabilities - Take a proactive, hands-on approach to problem resolution and implementation - Enhance Microsoft Secure Score and overall security stance - Stay updated with Microsoft technologies and security best practices through continuous learning - Put forth ideas and drive enhancements to systems, processes, and security controls - Participate in on-call rotation as necessary - Occasional travel may be required - Perform additional duties as needed that align with this roles scope and level