Security Engineer, Purview

Simeio

Microsoft Security Engineer supporting US-based engagement focused on Active Directory and Azure/Entra ID assessment. Providing recommendations to address critical risks in identity infrastructure.

Posted 7/25/2026full-timeRemote • Texas • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Active Directory architecture, including design, assessment, and migration of identity infrastructures, with a strong focus on compliance and risk management. Proficient in utilizing PowerShell and various tools for data analysis and remediation planning.

Highest-signal resume keywords

Active Directory ArchitectureAzure/Entra ID AssessmentPowerShell Query ExecutionSailPoint ReportingData Governance Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active Directory DesignAzure/Entra ID DeploymentPowerShell ScriptingData ManagementGroup Policy DesignIdentity Infrastructure ReviewConfiguration Gap AnalysisRemediation PlanningRisk AssessmentEnterprise Identity Management

Soft Skills

Strong Communication Skills

Tools & Technologies

ADUCManageEngineStealthAUDITAD Scanning Utilities

Industry Keywords

Data GovernanceCompliance FrameworksIdentity ManagementOperational GapsSecurity Group Topology

Tech Stack

Tools & technologies

Azure

About the role

Key responsibilities & impact

Assess the current state of the client’s Active Directory and Azure/Entra ID deployment, including forest design, site design, domain design, security group topology, deployment architecture, organizational unit (“OU”) design, authentication, and group policy design.
Manage the migration of enterprise data governance and compliance frameworks to Microsoft Purview, ensuring secure data management and regulatory compliance.
Run PowerShell queries against the client AD to determine relevant statistics of current AD and Azure objects, including users, accounts, groups, organizational units (OUs), computer objects, and related identity objects.
Run SailPoint out-of-the-box reports against AD connectivity to provide group and account ownership and membership information.
Review AD configurations, processes, and documentation to understand the client’s current deployment and operating model.
Identify configuration and operational gaps in the client’s AD domains, infrastructure, architecture, and deployment.
Prioritize identified gaps based on criticality and risk.
Provide recommendations to address critical gaps and risks across AD and Entra ID environments.
Discover and assess current processes for AD group management, AD group policy management, and AD account management.
Suggest modifications and refinements to existing processes and create new processes if required.
Determine the resources and skills necessary to complete remediation activities and achieve defined milestones.
Provide an estimated budget to accomplish remediation as outlined during the assessment phases.
Leverage client tools such as ADUC (Active Directory Users & Computers), ManageEngine, StealthAUDIT, or other AD scanning utilities as needed to accomplish data-gathering activities.

Requirements

What you’ll need

Strong experience as an Active Directory Architect, including domain consolidation, AD assessment, and enterprise identity infrastructure review.
Hands-on knowledge of Active Directory forest, site, domain, OU, security group, authentication, and group policy design.
Experience assessing Azure/Entra ID deployments and hybrid identity environments.
Ability to run and interpret PowerShell queries against AD domains to gather statistics on users, accounts, groups, OUs, computer objects, and related AD/Azure objects.
Experience using SailPoint reports for AD group and account ownership and membership analysis.
Ability to identify configuration and operational gaps and prioritize them based on criticality and risk.
Experience reviewing AD configurations, processes, and documentation.
Working knowledge of tools such as ADUC, ManageEngine, StealthAUDIT, and other AD scanning utilities.
Ability to provide practical recommendations, remediation planning inputs, resource estimates, skill requirements, and budget estimates.
Strong communication skills to document findings, recommendations, risks, and remediation plans for stakeholders.

Benefits

Comp & perks

Health insurance
401(k)
Paid time off
Flexible work arrangements
Professional development opportunities