Senior Security Operations Engineer

Microsoft is one of the largest enterprise service companies in the world, and they are seeking a Senior Security Operations Engineer to join their Cloud & AI organization. The role involves driving Identity Lifecycle Management, administering Active Directory, and innovating with AI-driven automation to enhance security and operational efficiency.

Responsibilities:

• Drive Identity Lifecycle Management across On-Prem Active Directory and Entra
• Administer and troubleshoot Active Directory and Entra AD Identities, GPOs, OUs, Groups, and Devices. Ensure Secure Access & Compliance oversee identity governance for Entra Online, and guest accounts lifecycle
• Lead Advanced Troubleshooting & Escalations while participating in on-call rotations and direct end user support
• Resolve complex identity-related incidents and provide Tier 2/Tier 3 support for critical issues
• Enable Automation & Innovation by developing PowerShell scripts, building workflows with Power Automate/Apps, and integrating support ticketing systems for operational efficiency
• Innovate with AI-driven automation for ticket triage, predictive identity health, compliance evidence generation, and identify areas of self-help automation
• Deliver Insights & Service Improvements by creating Power BI dashboards for KPIs and SLA adherence, analyzing customer sentiment, and enhancing knowledge bases through dynamic content automation

Requirements:

• Doctorate in Statistics, Mathematics, Computer Science, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR equivalent experience
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter
• 6+ years of hands‑on experience or leading engineering functions administering Microsoft Entra ID (Azure AD), covering identity management, application integrations, group and entitlement management, and end‑to‑end lifecycle processes for directory and access components
• 5+ years experience managing Windows/Azure Virtual Desktop or similar virtualization technologies within an enterprise environment
• 5+ years of experience administering on‑premises Active Directory, including user, group, and computer management, Group Policy administration, PowerShell, and structured OU governance; and experience driving hybrid identity digital transformation for an enterprise
• 5+ years of experience in resolving complex identity incidents, applying advanced Tier 2/3 expertise, rigorous root cause analysis, and dependable enterprise-level on call support across Active Directory, Entra ID, and AVD
• 2+ years of experience leveraging AI to automate operational processes, enable predictive insights, and drive continuous service improvement through AI‑driven identity governance
• 5+ years of experience in security hardening across identities, endpoints, domains, applications, and tenant environments