Senior Microsoft Security Engineer

• Design, implement, and operationalise solutions across the full Microsoft Security portfolio including Defender XDR, Sentinel, Entra, Intune, Defender for Cloud, and Purview. • Design solutions aligned to Microsoft Zero Trust and Cybersecurity Reference Architectures (MCRA), integrating with customers' existing security investments. • Plan and execute structured rollouts with clear success criteria and minimal business disruption. • Lead data security engagements end to end with Microsoft Purview as the foundation, including data discovery, risk assessment, classification consultancy, information protection, data loss prevention, insider risk management, data lifecycle management, records management, and eDiscovery. • Translate regulatory obligations (UAE PDPL, GDPR, DIFC/ADGM regimes, sector regulations) into classification schemes, protection policies, and measurable controls. • Develop data protection strategy and roadmap documents for customers from current-state maturity assessment to phased, prioritised implementation plan. • Advise on migrations from third-party DLP/classification platforms to the Microsoft stack. • Act as the senior technical authority for Microsoft Security opportunities including scoping, architecture, effort estimation, proposal content, and executive presentations. • Deliver demos, proof-of-concept environments, and Microsoft funding-program assessments and workshops. • Support licensing conversations (E3/E5 step-up, E5 Security/Compliance add-ons) mapping features to customer requirements. • Define operational runbooks and handover packs including alert triage, policy tuning cadence, and compliance reporting dashboards. • Perform periodic health checks and maturity uplifts across deployed Microsoft security workloads. • Mentor engineers across the Microsoft Security stack and build reusable delivery assets such as design templates, policy baselines, classification frameworks, and assessment toolkits. • Contribute to Microsoft partner designation and specialisation requirements through certifications and referenced deliveries. • Consultant's mindset comfortable leading classification and governance conversations with legal, compliance, and executive stakeholders beyond just administering consoles. • Breadth-plus-depth profile credible across the full Microsoft Security stack with genuine expert depth in data security and classification. • Ability to independently own complex, multi-workload engagements from assessment to enforcement and operational handover. • Experience delivering at least five enterprise Microsoft Purview engagements including classification and DLP with stakeholder-led taxonomy definition. • Hands-on implementation experience across Defender XDR, Sentinel, and Entra Conditional Access in enterprise environments. • Strong knowledge of Microsoft 365 E5 / E5 Security / E5 Compliance licensing constructs and feature mapping. • Proficiency in PowerShell and KQL for administration, automation, hunting, and reporting. • Familiarity with regional data privacy regulations (UAE PDPL, GDPR, DIFC/ADGM) and frameworks such as ISO 27001 and NIST CSF. • Excellent consulting skills including workshop facilitation, executive communication, documentation, and multi-stakeholder management.