Job Summary

We are seeking a Cloud Security Engineer with L1/L2 experience to support, administer, monitor, and troubleshoot Microsoft cloud security, identity, endpoint, and compliance solutions. The role will focus on day-to-day operational support, security policy administration, incident triage, configuration activities, and technical troubleshooting across Microsoft 365, Microsoft Entra ID, Intune, Microsoft Defender, and Microsoft Purview. The engineer will work with security, compliance, infrastructure, and IT teams and will escalate complex issues in line with defined operational procedures.

Key Responsibilities

· Provide L1/L2 operational support for Microsoft cloud security and Microsoft 365 security services.

· Administer and support Microsoft 365 workloads including Exchange Online, Teams, SharePoint Online, and OneDrive for Business.

· Support user and group lifecycle activities, access permissions, and security-related configuration changes.

· Support Microsoft Entra ID administration, including user authentication, MFA, Conditional Access, identity lifecycle, and access troubleshooting.

· Administer and support Microsoft Intune for device enrollment, compliance policies, configuration profiles, application deployment, and endpoint security.

· Monitor and troubleshoot endpoint security and compliance issues across corporate Windows and mobile devices.

· Support Microsoft Defender security solutions, including:

Microsoft Defender for Endpoint (MDE)

Microsoft Defender for Office 365 (MDO)

Microsoft Defender for Identity (MDI)

· Monitor security alerts, investigate initial indicators, perform basic triage, and escalate complex incidents to senior security teams.

· Support Microsoft Purview compliance solutions, including:

Data Loss Prevention (DLP)

Sensitivity Labels / Microsoft Information Protection (MIP)

Retention and Records Management

· Support audit, eDiscovery, compliance, and data protection activities as assigned.

· Assist with Microsoft Priva and privacy-related operational activities where required.

· Perform standard troubleshooting using Microsoft portals, logs, reports, PowerShell, and documented procedures.

· Create and maintain operational documentation, knowledge articles, configuration records, and customer communication.

· Follow defined change management, incident management,



problem management, and escalation procedures.

· Coordinate with L2/L3 engineers and Microsoft/vendor support for issues requiring advanced investigation or product-level escalation.

L1 Responsibilities

· Monitor alerts, service health, device compliance, security events, and operational queues.

· Perform initial troubleshooting and resolve standard user, device, application, authentication, and policy-related incidents.

· Execute approved administrative tasks and standard configuration changes.

· Collect logs, screenshots, error details, and diagnostic information for unresolved issues.

· Follow knowledge articles, SOPs, runbooks, and escalation procedures.

· Escalate incidents that require advanced troubleshooting, policy design, or architectural decisions.

L2 Responsibilities

· Perform advanced troubleshooting of Microsoft cloud security, identity, endpoint, and compliance issues.

· Analyze Microsoft Defender, Intune, Entra ID, Microsoft 365, and Purview logs and reports to identify root causes.

· Configure and troubleshoot MFA, Conditional Access, Intune policies, application deployment, device compliance, and endpoint security controls.

· Support creation, testing, tuning, and validation of DLP policies, sensitivity labels, retention policies, and security configurations.

· Investigate recurring incidents and provide recommendations to reduce operational impact.

· Assist with security incidents, evidence collection, remediation activities, and escalation to L3/vendor support when required.

· Support implementation and validation of security and compliance changes under approved change-management processes.

Required Skills & Experience

Microsoft 365 & Identity

· Hands-on experience with Microsoft 365 administration and basic troubleshooting.

· Working knowledge of Microsoft Entra ID (Azure AD), including MFA, Conditional Access, users, groups, and authentication.

· Understanding of identity and access management,



least privilege, and secure access principles.

· Basic-to-intermediate PowerShell skills for administration, troubleshooting, and reporting.

Endpoint & Cloud Security

· Hands-on experience with Microsoft Intune for device and application management.

· Knowledge of device enrollment, compliance policies, configuration profiles, application deployment, and endpoint security policies.

· Working knowledge of Microsoft Defender for Endpoint (MDE), Defender for Office 365 (MDO), and Defender for Identity (MDI).

· Ability to perform basic security alert triage, investigation, and remediation.

· Understanding of endpoint security concepts, malware/phishing protection, and security incident handling.

Compliance & Data Protection

· Working knowledge of Microsoft Purview.

· Hands-on or practical exposure to Data Loss Prevention (DLP) and Sensitivity Labels / Microsoft Information Protection (MIP).

· Understanding of retention, audit, eDiscovery, and records-management concepts.

· Awareness of data protection and privacy requirements.

Cloud Security Fundamentals

· Understanding of cloud security principles and Zero Trust concepts.

· Understanding of least-privilege access and identity-centric security.

· Basic understanding of security monitoring, incident response, and security operations.

· Ability to follow security standards, operational procedures, and change-management processes.

Preferred Skills

· Microsoft security or cloud certifications such as SC-900, SC-300, SC-200, SC-400, AZ-900, or equivalent knowledge.

· Experience supporting enterprise Microsoft 365 environments.

· Experience with PowerShell automation and operational reporting.

· Valuable troubleshooting, documentation, communication, and customer-support skills.

Education & Experience

· Bachelor's degree or equivalent qualification in Computer Science, Information Technology, Cybersecurity, or a related field.

· L1: 1–2 years of relevant experience in Microsoft 365, cloud security, endpoint, identity, or IT security operations.

· L2: 2–4 years of relevant experience in Microsoft 365 security, cloud security, endpoint management, identity, or compliance operations.

Benefits:

- Health insurance
- Provident Fund

Work Location: In person

📌 Cloud Security Engineer (Bengaluru)
🏢 Skysecure Technologies Private
📍 Bengaluru