About this role
This is a full-time, remote role based in India or the Philippines for an experienced Microsoft engineer who specializes in Microsoft 365 security, identity management, endpoint protection and Windows device management. You will assess Microsoft 365 tenants and Windows endpoints, identify vulnerabilities, implement security hardening and manage security configurations across several separate, authorized client environments in a managed service provider (MSP) model. You will work with Entra ID, Conditional Access, Intune, Defender and Exchange Online, operate independently, and work with both IT professionals and non-technical end users at client organizations. Changes follow structured change management with testing and rollback planning, and every engagement ends with clear documentation and handover notes. The role must keep an agreed overlap with U.S. business hours; the exact schedule is confirmed during hiring.
What you’ll do
- Assess Microsoft 365 tenants and Windows endpoints, identify vulnerabilities and implement security hardening
- Configure identity and access controls in Entra ID, including MFA, Conditional Access and least-privilege admin roles
- Deploy and manage Intune device enrollment, compliance and configuration policies
- Implement endpoint security: BitLocker, Windows Firewall, Attack Surface Reduction rules, Defender antivirus and Windows Update policies
- Configure Microsoft Defender, investigate security alerts and incidents, remediate or escalate them
- Secure Exchange Online: anti-phishing protection and email authentication (SPF, DKIM, DMARC)
- Write PowerShell scripts for administration, automation and reporting
- Follow structured change management: pilot groups, report-only mode, testing and rollback planning
- Keep clear technical documentation: tickets, configuration records and handover notes for completed engagements
- Provide occasional telephone and remote support to end users for Microsoft 365 and Windows issues
What we’re looking for
- At least 3 years of hands-on experience with Microsoft 365 and Windows endpoint environments
- Substantial recent experience configuring security controls and resolving security issues
- Implementation-level expertise beyond basic helpdesk support
- Microsoft 365 administration and security configuration
- Microsoft Entra ID (Azure AD) identity and access management
- Conditional Access policies and MFA implementation
- Microsoft Intune device enrollment, compliance and configuration policies
- Endpoint security: BitLocker, Windows Firewall, ASR rules, antivirus and Windows Update policies
- Microsoft Defender configuration, alert investigation and remediation
- Exchange Online email security, anti-phishing and email authentication (SPF, DKIM, DMARC)
- Windows endpoint hardening and management
- PowerShell scripting for administration, automation and reporting
- Security alert investigation and incident escalation
- Change management: pilot groups, report-only mode and rollback planning
- Technical documentation: tickets, configuration records and handover notes
- Least-privilege access principles and secure data handling
- Strong spoken and written English
- Ability to keep an agreed overlap with U.S. business hours
Nice to have
- MSP experience supporting several client environments
- PreVeil deployment, configuration and handover
- Implementing CMMC or NIST SP 800-171 technical controls
- Windows Autopilot
- Microsoft Graph for Microsoft 365 administration or integration
- KQL for log analysis
- Microsoft Sentinel
- Microsoft Purview (information protection and compliance)
- Microsoft certifications such as SC-300, MD-102 or SC-200 (hands-on ability is the priority)
About F5 Global Talent
F5 Global Talent is a people-first company that hires experienced professionals and places them in long-term, fully remote roles with leading U.S. companies. We are your direct employer of record — we handle payroll, equipment, HR, and ongoing support, so you can focus on doing your best work. To date we have placed 500+ professionals, and 98% remain with their role past the first 90 days.