MSP Engineer - Microsoft focused CyberSecurity (CMMC Level 2)

You’ll operate customer environments to CMMC Level 2 expectations, automate repetitive tasks, and continuously improve security and compliance outcomes. You’re hands‑on with Microsoft Defender, Sentinel, Entra ID, Intune, and Purview, and you love turning tickets into automations (Azure Logic Apps, RMM policies/scripts, or n8n workflows). You’ll maintain SLAs/OLAs, reduce MTTR, and capture evidence for audits—without creating toil.ResponsibilitiesOperate & secure Microsoft estatesMonitor, triage, and resolve incidents across Defender (Endpoint/Identity/Office/Cloud) and Microsoft Sentinel; tune analytics rules, KQL queries, and playbooks.Manage Entra ID (PIM, Conditional Access, MFA), Intune (compliance, baselines, hardening), and Purview (labels/DLP/insider risk).Maintain secure configurations for Azure (policy, RBAC, Key Vault, logging, networking) and common on‑premises integrations (AD, file services, VPN, firewalls).CMMC L2 & compliance operationsMap operational work to NIST 800‑171 practices; capture evidence automatically where possible (logs, reports, tickets).Contribute to control runbooks, SOPs, and customer artifacts (e.g., SSP/POA&M inputs in partnership with GRC resources).Support GCC High tenants and Azure Government as needed (we’ll train where you need to ramp).Automation & reliability engineeringBuild Azure Logic Apps/Power Automate playbooks, RMM scripts/policies, and n8n flows to eliminate manual steps (onboarding, patching, alert enrichment, evidence collection, remediation).Use PowerShell (and, when appropriate, Graph API, KQL, Bicep/Terraform) to codify repeatable operations.Measure results (time saved, error reduction, SLA impact) and iterate.Customer experience & service managementWork tickets to SLA; document root cause and preventive actions.Participate in on‑call rotation for priority incidents (reasonable frequency).Contribute to QBRs with concise ops/health summaries and recommendations.