Microsoft Security Framework Engineer

We are seeking a highly experienced Microsoft Security Framework Engineer to lead the full activation and optimization of the Microsoft Security stack within our Microsoft 365 E5 environment. This is a critical contract role focused on designing, configuring, and deploying a comprehensive security framework to protect endpoints, identities, cloud applications, email, and sensitive Protected Health Information (PHI).The successful candidate will serve as the subject matter expert responsible for implementing Microsoft Defender and Purview capabilities from the ground up, ensuring alignment with industry best practices and regulatory requirements. Key ResponsibilitiesLead the end-to-end design, configuration, and deployment of the full Microsoft Security stack, including:

Microsoft Defender for EndpointMicrosoft Defender for Office 365 Plan 2Microsoft Defender for IdentityMicrosoft Defender for Cloud AppsEntra ID ProtectionMicrosoft Purview (Data Loss Prevention (DLP) and Sensitivity Labels for PHI)Architect and implement a cohesive Microsoft security framework that integrates all components for maximum protection and visibilityConfigure advanced threat protection, automated investigation and response (AIR), attack surface reduction rules, and device control policiesDesign and deploy Purview DLP policies and sensitivity labeling strategies tailored for PHI protection and regulatory compliance (HIPAA, etc.)Implement Entra ID Protection policies, Conditional Access, and identity threat detection capabilitiesConduct security assessments, gap analysis, and provide recommendations to strengthen the overall security postureCollaborate with internal IT, security, and compliance teams to ensure successful adoption and operational handoverDevelop documentation, runbooks, and knowledge transfer materials for ongoing management and maintenanceProvide expert guidance on Microsoft 365 E5 security licensing, features, and roadmap