Security Engineer

Summary

RKD Group is a direct response marketing and advertising agency seeking a Security Engineer to secure and manage their Microsoft 365 environments. The role focuses on threat protection, compliance, identity management, and security operations, while also providing support for network resources and maintaining core security infrastructure.

Responsibilities

• Collaborate with other IT team members to develop and implement IT security policies and procedures
• Provide technical security guidance and support to our National Support Center in Jira
• Ensure security and compliance standards are met across all Microsoft 365 services
• Monitor and respond to security incidents, alerts, and threats within the M365 environment
• Document security configurations, processes, and procedures
• Acts as a liaison for security initiatives and new technologies, ensuring effective communication with users and help desk support
• Manage and administer Microsoft 365 (M365) services, such as Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Purview (Compliance, DLP, Information Protection), Microsoft Entra ID (Azure AD) – Identity and Access Management, Conditional Access Policies, Intune/Autopilot – Device Compliance and Security, Exchange Online Protection (EOP) and Anti-Phishing, SharePoint Online and OneDrive Security & Permissions, Power Automate – Security Automation and Workflow, Microsoft Sentinel (SIEM) – Security Monitoring and Alerting
• Assist with Windows-based system maintenance and server support as needed
• Support Active Directory, DNS, DHCP, and Group Policy from a security and compliance perspective
• Manage and maintain infrastructure resources such as firewalls and network switches
• Support network security monitoring and access controls
• Assist with managing AWS EC2 server infrastructure, including provisioning, patching, and lifecycle management
• Support the planning and execution of on-premises server migrations to AWS, including testing, cutover, and post-migration validation

Skills

• Proven experience administering and securing Microsoft 365 environments required
• Strong understanding of identity and access management, Zero Trust principles, and cloud security best practices
• Familiarity with Active Directory, DNS, DHCP, and Group Policy required
• Demonstrated experience with Jira or an equivalent issue tracking and ticketing system
• Experience with AWS server management and on-premises infrastructure migrations to AWS required
• Excellent problem-solving and communication skills
• Ability to work independently and as part of a team
• 3+ years in a Systems Engineer or Security Engineer role demonstrating experience in the above listed responsibilities and expectations preferred
• Familiarity with SIEM platforms, particularly Microsoft Sentinel, is advantageous
• Any certifications related to Microsoft 365 Security, Microsoft Azure Security, or information security are a plus (e.g., MS-500, SC-200, SC-300, SC-400, CompTIA Security+)
• SOC 2 Type 2 compliance experience is a plus

Qualifications

Must Haves

• Proven experience administering and securing Microsoft 365 environments required
• Strong understanding of identity and access management, Zero Trust principles, and cloud security best practices
• Familiarity with Active Directory, DNS, DHCP, and Group Policy required
• Demonstrated experience with Jira or an equivalent issue tracking and ticketing system
• Experience with AWS server management and on-premises infrastructure migrations to AWS required
• Excellent problem-solving and communication skills
• Ability to work independently and as part of a team

Nice to Haves

• 3+ years in a Systems Engineer or Security Engineer role demonstrating experience in the above listed responsibilities and expectations preferred
• Familiarity with SIEM platforms, particularly Microsoft Sentinel, is advantageous
• Any certifications related to Microsoft 365 Security, Microsoft Azure Security, or information security are a plus (e.g., MS-500, SC-200, SC-300, SC-400, CompTIA Security+)
• SOC 2 Type 2 compliance experience is a plus