Associate – Microsoft 365 Security Engineer

About RSM US LLP Stay Alert: Avoid Recruitment Scams Across industries, cybercriminals are posing as company recruiters using fake job postings and employment offers to trick people into providing personal information or payment. Be alert and never provide personal/financial information or payment to anyone claiming to offer a job opportunity. During the recruiting process, RSM US will never: • Ask you for payment to process documents, purchase equipment, or for any other reason. • Request your banking or credit card information • Send you a check to purchase your own equipment If you believe you are a victim of a job scam, it’s recommended that you report it to law enforcement, contact your financial institution and notify the website in which the job was listed. --- RSM is the leading provider of assurance, tax and consulting services to the middle market. With over 17,000 professionals across the U.S. and Canada and a global presence in 120 countries, our purpose is to deliver the power of being understood to our clients, colleagues and communities. As first-choice advisors, we are focused on developing leading professionals and innovative services to meet our clients’ evolving needs in today’s ever-changing business environment. At RSM, we strive to deeply understand the full picture of an employee’s individual skills and passions. Our culture empowers you to own your career to reach your goals and make a meaningful impact on the world around you. Gain limitless opportunities to grow forward personally and professionally. Don’t just go forward. #GrowForwardatRSM For more information, visit rsmus.com Learn how you can #GrowForwardatRSM visit www.rsmus.com/careers

RSM US LLP

Experience the power of being understood.

AccountingAuditConsultingTax ServicesPrivate EquityIndustrial ProductsConsumer ProductsFinancial Servicesand Real Estate

R

rsmus.com

10,001+ employees

Accounting

Chicago, Illinois

1926

Partnership

432k LinkedIn followers

• Client delivery
• Plan, configure and deploy Microsoft 365 security solutions across Defender XDR (Defender for Endpoint, Office 365, Identity and Cloud Apps), Entra ID, Intune and Microsoft Purview
• Design and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies
• Build Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies
• Support hybrid scenarios such as Entra Connect / Cloud Sync, on-premises Active Directory, Group Policy and hybrid Exchange
• Run current-state assessments and produce findings, recommendations and roadmaps
• Automate configuration and reporting with PowerShell and Microsoft Graph
• Client engagement
• Lead working sessions and workshops with client IT and security stakeholders
• Explain how M365 controls map to security frameworks such as NIST CSF, CIS Benchmarks, ISO 27001
• Present recommendations and trade-offs clearly to both technical and non-technical audiences
• Write polished deliverables: design documents, runbooks, status updates and executive summaries
• Team contribution
• Manage your own tasks and timelines, and raise risks early
• Contribute to reusable templates, scripts and standard policy frameworks
• Stay current on the Microsoft security roadmap and share what you learn with the team

Required

• Driven self-starter. You take ownership of your work and move it forward without waiting to be told the next step.
• Resourceful problem solver. When you hit something new, you dig in: Microsoft Learn, documentation, community forums, a test tenant. You come back with an answer or a well-formed question.
• Critical thinker. You ask why a control exists, weigh the trade-offs, and recommend what fits the client's risk and business needs rather than defaulting to a checklist.
• Confident communicator. You can explain a Conditional Access design to an engineer and its business value to an executive. You speak credibly about security standards and M365 capabilities, and you are comfortable saying "let me confirm and follow up."
• Client-focused. You build trust, manage expectations and represent the team professionally.
• Curious and coachable. You keep up with a fast-moving platform and welcome feedback.
• 2+ years of hands-on IT or security experience, ideally in Microsoft environments
• Strong written and verbal communication skills
• Practical experience with at least two of: Microsoft Defender XDR, Entra ID, Microsoft Purview, Intune
• Working knowledge of on-premises infrastructure: Active Directory, DNS, Group Policy, Windows Server and, ideally, Exchange Server
• Understanding of hybrid identity, including directory synchronization and authentication methods
• Familiarity with PowerShell for administration and scripting
• Working knowledge of core security concepts: Zero Trust, least privilege, identity and access management, data classification and endpoint protection
• Ability to travel occasionally to client sites

Preferred

• Bachelor's degree in information technology, cybersecurity, computer science or a related field, or equivalent work experience
• Microsoft certifications such as SC-300 (Identity and Access Administrator), SC-200 (Security Operations Analyst), SC-401 (Information Security Administrator), MS-102 (Microsoft 365 Administrator) or AZ-500, SC-900, MS-900 or willing to obtain any of these in 3 months
• Broader security certifications such as Security+, CISSP (or progress toward it) or CCSP
• Prior consulting or managed services experience across multiple client tenants
• Experience with Intune and device compliance as it relates to Conditional Access
• Experience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules
• Exposure to Microsoft Sentinel or other SIEM platforms
• Experience in GCC or GCC High environments
• Familiarity with Copilot and AI data security considerations in Microsoft 365
• At RSM, we offer a competitive benefits and compensation package for all our people. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.
• We believe flexibility and in-person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs.
• All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.
• RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.
• At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.