Senior Microsoft Security Engineer – Security Hardening (3-Month Contract)
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
3-Month Contract | Mississauga, ON | Hybrid
The OpportunityOur client, a large global software organization, is seeking an experienced Senior Microsoft Security Engineer to support a focused security hardening initiative across its Microsoft environment.
This is a hands-on consulting engagement requiring someone who can assess existing configurations, identify security gaps, develop recommendations and, most importantly, implement remediation measures across Active Directory, Entra ID, Microsoft 365 and Intune.
Key Responsibilities- Assess and harden Active Directory, Entra ID and Microsoft 365 environments against Microsoft and CIS security best practices.
- Review and strengthen identity security, privileged access, MFA, Conditional Access and Privileged Identity Management (PIM).
- Evaluate and remediate Group Policy, application permissions, access controls and legacy authentication protocols.
- Review Intune configurations, endpoint security policies and Windows security baselines.
- Implement improvements to M365 security, including administrative roles, external sharing, audit controls and information protection.
- Identify inactive accounts, excessive permissions and configuration vulnerabilities; implement appropriate remediation.
- Develop and execute automation using PowerShell and Microsoft Graph to support security improvements.
- Document findings, remediation activities and recommendations.
- Strong hands-on experience securing Microsoft environments, including Active Directory, Entra ID and Microsoft 365, Defender/Crowdstrike
- Demonstrated experience with security assessments, configuration hardening and remediation.
- Strong knowledge of Conditional Access, MFA, PIM, privileged access and identity governance.
- Experience with Group Policy, Intune, Windows security baselines and hybrid identity environments.
- Proficiency with PowerShell and Microsoft Graph automation.
- Familiarity with Microsoft security frameworks and CIS benchmarks.
- Ability to work independently, assess risks and translate findings into practical technical improvements.
Engagement: Initial 3-month contract
Location: Mississauga, ON – Hybrid/Remote
This is an excellent opportunity for a hands-on Microsoft security specialist to make a tangible impact on the security posture of a large, complex global environment.
More about this job
Responsibilities
Assess and harden Active Directory, Entra ID, Microsoft 365, and Intune configurations, addressing identity, access, endpoint, and information-protection risks. Automate security improvements with PowerShell and Microsoft Graph, and document findings, remediation, and recommendations.
Requirements
Requires hands-on experience securing Microsoft environments and conducting security assessments, configuration hardening, and remediation. Candidates should know identity and privileged-access controls, Group Policy, Intune, Windows security baselines, hybrid identity, PowerShell, Microsoft Graph, and Microsoft or CIS security practices.
Skills
- Active Directory Security
- Entra ID
- Microsoft 365 Security
- Identity Security
- Conditional Access
- Multi-Factor Authentication
- Privileged Identity Management
- Group Policy
- Intune
- Windows Security Baselines
- PowerShell
- Microsoft Graph
- Security Assessments
- Configuration Hardening
- Remediation
- CIS Benchmarks
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Consulting
Keywords
- Active Directory
- Entra ID
- Microsoft 365
- Microsoft Defender
- CrowdStrike
- Intune
- Conditional Access
- Multi-Factor Authentication
- Privileged Identity Management
- Privileged Access
- Identity Governance
- Group Policy
- Windows Security Baselines
- Hybrid Identity
- PowerShell
- Microsoft Graph
- CIS Benchmarks
- Security Hardening
- Security Assessments
- Configuration Remediation
- Application Permissions
- Access Controls
- Legacy Authentication
- Endpoint Security
- Audit Controls
- Information Protection
- Security Automation