IT Security Engineer – Microsoft 365 Cloud/Azure at Axil Health

Raleigh, North Carolina, United States -

Full Time

Start Date

Immediate

Expiry Date

22 Jul, 26

Salary

0.0

Posted On

23 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Microsoft 365, Azure, Microsoft Defender, Microsoft Sentinel, Microsoft Purview, Microsoft Entra ID, Identity and Access Management, HIPAA Compliance, Data Loss Prevention, PowerShell, Incident Response, Threat Detection, Security Engineering, Risk Assessment, Cloud Security

Industry

Hospitals and Health Care

Description

Description Overview We are seeking a skilled Security Engineer to join our team to help maintain and improve security of our Microsoft (M365, Azure) cloud-first environment, IT infrastructure and distributed workforce. The Security Engineer is responsible for designing, implementing, and continuously improving security controls across the organization’s Microsoft 365 and Azure cloud environment, with a strong focus on protecting electronic Protected Health Information (ePHI) and supporting HIPAA and healthcare regulatory requirements. This role serves as a hands-on technical expert for Microsoft security technologies, including identity protection, threat detection, incident response, data loss prevention, and secure use of emerging AI-enabled capabilities, ensuring systems are configured according to Microsoft best practices and healthcare compliance standards. The Security Engineer works closely with IT, compliance, and clinical operations teams to proactively reduce risk, respond to security incidents, and support audits and risk assessments. In addition, this role assists in the security and privacy evaluation of IT products, including AI-powered tools and services, used throughout the organization, helping ensure that solutions meet organizational security, data protection, and compliance requirements before and after adoption. Key Responsibilities Cloud & Identity Security Design, implement, and maintain security controls across Microsoft 365 and Azure to protect organizational systems, users, and electronic Protected Health Information (ePHI). Configure and manage Microsoft Entra ID (Azure AD) security features, including Conditional Access, Multi-Factor Authentication (MFA), Identity Protection, and role-based access control (RBAC). Support secure access for a distributed workforce. Threat Detection & Incident Response Deploy and manage Microsoft Defender solutions, including Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud. Monitor, investigate, and respond to security alerts and incidents using Microsoft Sentinel and Defender portals. Perform incident triage, root cause analysis, containment, and remediation, with appropriate documentation and post incident review. Data Protection & Healthcare Compliance Implement and maintain Data Loss Prevention (DLP), sensitivity labels, and information protection policies using Microsoft Purview. Support HIPAA Security Rule requirements by helping ensure appropriate administrative and technical safeguards are in place to protect ePHI. Assist with internal and external audits, risk assessments, and compliance reviews. AI & Emerging Technology Security Support the secure and compliant use of AI enabled capabilities, including Microsoft and third party AI tools, with attention to data access, retention, and privacy controls. Participate in the security and privacy evaluation of IT products, including AI powered solutions, before and after adoption. Help assess risks related to data exposure, access boundaries, logging, and regulatory compliance for emerging technologies. Collaboration & Continuous Improvement Work closely with IT operations, compliance, clinical operations, and leadership to align security controls with business and regulatory needs. Maintain clear documentation of security standards, configurations, and procedures. Stay current on Microsoft security capabilities, healthcare security guidance, and evolving threats. Required Skills & Qualifications Core Technical Skills Strong experience securing Microsoft 365 and Azure cloud environments. Hands-on experience with Microsoft security tools, including Microsoft Defender (Endpoint, Office 365, Identity, Cloud), Microsoft Sentinel, Microsoft Purview (DLP, sensitivity labels, compliance policies) Solid understanding of identity and access management using Microsoft Entra ID. Security & Compliance Knowledge Familiarity with HIPAA and healthcare regulatory requirements, particularly related to safeguarding ePHI. Experience supporting audits, risk assessments, and compliance initiatives. Excellent understanding of security best practices for cloud first and remote workforce environments. Automation & Operations Experience using PowerShell for automation, reporting, or security operations tasks. Ability to analyze security alerts, logs, and telemetry across Microsoft platforms. Professional Skills Strong analytical and problem solving abilities. Excellent written and verbal communication skills, including the ability to explain security concepts to non-technical stakeholders. Ability to balance security, usability, and compliance in a healthcare environment. Experience 3+ years in security engineering or cloud security roles. Experience with incident response, SIEM tools, and security compliance frameworks. Working knowledge of networking fundamentals, including TCP/IP, DNS, HTTPS, VPNs, and secure connectivity concepts preferred. Familiarity with modern / next generation firewall platforms, including policy based rules, application awareness, logging, and monitoring preferred. Experience collaborating with infrastructure or network teams on firewall rules, secure access design, or cloud network controls preferred. Exposure to Azure networking concepts such as V Nets, private endpoints, and service endpoints preferred. Certifications (Preferred) Microsoft Certified: Security Operations Analyst Associate Microsoft Certified: Identity and Access Administrator Associate Microsoft Certified: Cybersecurity Architect Expert

Responsibilities

The Security Engineer will design, implement, and maintain security controls across Microsoft 365 and Azure environments to protect ePHI and ensure HIPAA compliance. They will also manage threat detection, incident response, and evaluate the security of AI-powered tools and IT products.