Systems Engineer – Microsoft 365 Security & Compliance / Endpoint Security Engineer (GCC)

Job overview

Systems Engineer – Microsoft 365 Security & Compliance / Endpoint Security Engineer (GCC) at Leidos in Washington, DC. This is an onsite, full-time position with a salary range of $107,900.00 - $195,050.00. This role requires a seasoned professional to strategically manage and enhance the security and compliance posture of the M365 environment within a GCC tenant, particularly in a federal agency context. The engineer is responsible for protecting enterprise endpoints, ensuring compliant access to M365 services, and driving rapid engineering responses to vulnerabilities and operational risks.

What you'll do

• Lead the development, implementation, and ongoing management of M365 security policies, standards, and technical guardrails
• Own governance for data protection capabilities including document classification, labeling, retention, and Data Loss Prevention (DLP)
• Define and enforce email security policies such as encryption, sensitivity labeling, and secure mail flow
• Engineer and validate device-compliance–based Conditional Access policies
• Investigate and remediate Conditional Access failures, identity anomalies, and external/guest access issues
• Design, test, and deploy Intune configuration and compliance policies
• Develop remediation scripts
• Coordinate enterprise rollout of urgent vulnerability mitigations
• Establish and operate a risk management approach
• Support ATO/control assessment activities
• Lead integration and operational management of Microsoft Defender and Microsoft Sentinel
• Build and maintain SIEM integrations/connectors
• Tune audit retention, analytic rules, and alert logic
• Provide Tier 3 troubleshooting for device compliance failures, identity/access incidents, telemetry gaps, and OS/app protection issues
• Partner with cross-functional teams.

What we're looking for

Experience

Expert-level Intune engineering across Windows/macOS/iOS/iPadOS. Advanced PowerShell for remediation, automation, and OS image manipulation. Deep experience with Microsoft Defender (XDR, Endpoint, Cloud Apps). Hands-on with Sentinel SIEM, Function Apps, and cross-platform telemetry pipelines. Strong understanding of CAP architecture and identity risk enforcement. Experience with ATO control evidence, compliance mapping, and audit support.

Skills & competencies

systems engineer

microsoft 365

security

compliance

endpoint security

gcc

leidos

washington dc

united states

full time

it

m365

intune

defender

sentinel

About the employer

Leidos is hiring for this role. Industry: Cut and Sew Apparel Manufacturing (except Contractors). Sector: 31.