{"id":3407971,"url":"https://alion.io/job/rsm-us-associate-microsoft-365-security-engineer","title":"Associate – Microsoft 365 Security Engineer","company":{"id":8699,"name":"RSM US","domain":"rsmus.com","url":"https://alion.io/company/rsm","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":153,"ghost_share":0,"stale_share":0.654,"repost_share":0.013,"time_to_fill_p50_days":32,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States","Cedar Rapids, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":62800,"max":103400,"currency":"USD","period":"year","gross":null,"usd_annual":103400},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Copilot","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-28T16:48:23Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T04:28:17Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.\nRole overview\nWe are hiring an Associate to design, deploy and advise on Microsoft 365 security solutions for our clients. You will work across Microsoft Defender XDR, Entra ID, Microsoft Intune and Microsoft Purview, in both hybrid and full cloud environments.\nThis is a client-facing consulting role where you will be expected to have professionalism and strong business acumen. You will help lead technical conversations, translate security frameworks into practical M365 configurations, and own your tasks from discovery through handoff. We want someone who takes initiative, figures things out independently, and can speak confidently about what strong security posture can look like in a Microsoft 365 environment.\nWho we are looking for\nDriven self-starter. You take ownership of your work and move it forward without waiting to be told the next step.\nResourceful problem solver. When you hit something new, you dig in: Microsoft Learn, documentation, community forums, a test tenant. You come back with an answer or a well-formed question.\nCritical thinker. You ask why a control exists, weigh the trade-offs, and recommend what fits the client's risk and business needs rather than defaulting to a checklist.\nConfident communicator. You can explain a Conditional Access design to an engineer and its business value to an executive. You speak credibly about security standards and M365 capabilities, and you are comfortable saying \"let me confirm and follow up.\"\nClient-focused. You build trust, manage expectations and represent the team professionally.\n Curious and coachable. You keep up with a fast-moving platform and welcome feedback.\nOur Expectations (Key responsibilities)\nClient delivery\nPlan, configure and deploy Microsoft 365 security solutions across Defender XDR (Defender for Endpoint, Office 365, Identity and Cloud Apps), Entra ID, Intune and Microsoft Purview\nDesign and implement Conditional Access, Privileged Identity Management, MFA and identity protection policies\nBuild Purview data protection controls, including sensitivity labels, DLP, retention and insider risk policies\nSupport hybrid scenarios such as Entra Connect / Cloud Sync, on-premises Active Directory, Group Policy and hybrid Exchange\nRun current-state assessments and produce findings, recommendations and roadmaps\nAutomate configuration and reporting with PowerShell and Microsoft Graph\nClient engagement\nLead working sessions and workshops with client IT and security stakeholders\nExplain how M365 controls map to security frameworks such as NIST CSF, CIS Benchmarks, ISO 27001\nPresent recommendations and trade-offs clearly to both technical and non-technical audiences\nWrite polished deliverables: design documents, runbooks, status updates and executive summaries\nTeam contribution\nManage your own tasks and timelines, and raise risks early\nContribute to reusable templates, scripts and standard policy frameworks\nStay current on the Microsoft security roadmap and share what you learn with the team\nRequired qualifications\n2+ years of hands-on IT or security experience, ideally in Microsoft environments\nStrong written and verbal communication skills\nPractical experience with at least two of: Microsoft Defender XDR, Entra ID, Microsoft Purview, Intune\nWorking knowledge of on-premises infrastructure: Active Directory, DNS, Group Policy, Windows Server and, ideally, Exchange Server\nUnderstanding of hybrid identity, including directory synchronization and authentication methods\nFamiliarity with PowerShell for administration and scripting\nWorking knowledge of core security concepts: Zero Trust, least privilege, identity and access management, data classification and endpoint protection\nAbility to travel occasionally to client sites\nPreferred qualifications\nBachelor's degree in information technology, cybersecurity, computer science or a related field, or equivalent work experience\nMicrosoft certifications such as SC-300 (Identity and Access Administrator), SC-200 (Security Operations Analyst), SC-401 (Information Security Administrator), MS-102 (Microsoft 365 Administrator) or AZ-500, SC-900, MS-900 or willing to obtain any of these in 3 months\nBroader security certifications such as Security+, CISSP (or progress toward it) or CCSP\nPrior consulting or managed services experience across multiple client tenants\nExperience with Intune and device compliance as it relates to Conditional Access\nExperience with Microsoft Graph PowerShell SDK and ExchangeOnlineManagement modules\nExposure to Microsoft Sentinel or other SIEM platforms\nExperience in GCC or GCC High environments\nFamiliarity with Copilot and AI data security considerations in Microsoft 365\nAt RSM, we offer a competitive benefits and compensation package for all our people. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.\nWe believe flexibility and in-person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs.\nAll applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.\nAccommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at .\nRSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.\nRSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information.\nAt RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.\nCompensation Range: $62,800 - $103,400","description_format":"text","description_chars":8080,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-28T16:48:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 76 · green card filings: 26","filings_12m":76,"filings_prev_12m":89,"green_card_filings_12m":26,"median_offered_wage_usd":136127,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":32,"reasons":["conf:1","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":103400,"is_top_pay":true},"html_url":"https://alion.io/job/rsm-us-associate-microsoft-365-security-engineer","json_url":"https://alion.io/job/rsm-us-associate-microsoft-365-security-engineer.json","meta":{"generated_at":"2026-10-30T09:11:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13187,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8699},"rest":"https://alion.io/mcp/rest/get_company?id=8699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frsm-us-associate-microsoft-365-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frsm-us-associate-microsoft-365-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frsm-us-associate-microsoft-365-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rsm-us-associate-microsoft-365-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frsm-us-associate-microsoft-365-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3407971}},{"tool":"search_jobs","arguments":{"company":"rsmus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3407971},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}