Platform Security Engineer L3

OverviewBlackford Tech is seeking a Platform Security Engineer (L3) to lead the design, implementation, and ongoing development of our Microsoft security platform. This is a hands-on lead engineering role focused on building secure, scalable, and well-governed platform capabilities across Microsoft Sentinel, Defender XDR, Entra ID, endpoint security, and supporting Azure infrastructure. The ideal candidate will take ownership of the Microsoft security platform foundation across multi-tenant environments, helping to ensure customer platforms are deployed consistently, configured correctly, and aligned with Blackford Tech standards. The role is suited to someone who is comfortable combining architecture, engineering, and platform governance in a practical, delivery-focused environment. The ideal candidate will own the architecture and development of Microsoft Sentinel workspaces within a multi-tenant model, ensuring they are secure, scalable, and operationally effective. They will lead the onboarding and configuration of Defender XDR technologies, including Defender for Endpoint, Defender for Identity, Microsoft 365 security, and Cloud Apps. The role includes Entra ID security architecture, RBAC, and access segmentation, alongside endpoint security baselines, policy deployment, device onboarding support, and tenant configuration validation. The ideal candidate will also help drive consistency and maturity through infrastructure-as-code using ARM, Bicep, or Terraform, while supporting platform governance across cost, retention, and configuration standards. As a lead engineer, the successful candidate will work closely with SIEM engineering, Detection Engineering and SOC operations teams to ensure the platform supports both current operational needs and long-term growth.ResponsibilitiesLead the design, implementation, and ongoing development of the Microsoft security platform.Act as a hands-on lead engineer focused on secure, scalable, and well-governed platform capabilities across Microsoft Sentinel, Defender XDR, Entra ID, endpoint security, and Azure infrastructure.Own the Microsoft security platform foundation across multi-tenant environments to ensure consistent deployment, correct configuration, and alignment with Blackford Tech standards.Own the architecture and development of Microsoft Sentinel workspaces within a multi-tenant model to ensure security, scalability, and operational effectiveness.Lead onboarding and configuration of Defender XDR technologies (Defender for Endpoint, Defender for Identity, Microsoft 365 security, Cloud Apps).Lead Entra ID security architecture, RBAC, and access segmentation; define endpoint security baselines, policy deployment, device onboarding support, and tenant configuration validation.Drive consistency and maturity through infrastructure-as-code using ARM, Bicep, or Terraform; support platform governance across cost, retention, and configuration standards.Collaborate with SIEM engineering, Detection Engineering, and SOC operations teams to ensure the platform meets current operational needs and supports long-term growth.Qualifications5+ years of experience in security engineering, platform engineering, or a similar role with strong hands-on experience across Microsoft security technologies.Experience in Microsoft Sentinel architecture and administration, ideally in multi-tenant environments.Experience onboarding and configuring Defender XDR, including Defender for Endpoint and Defender for Identity.Experience with Entra ID security architecture, RBAC, and access segmentation.Experience with endpoint security controls, policy deployment, and infrastructure-as-code.Knowledge of Attack Surface Reduction configurations and Conditional Access Policies.Experience in managed services, enterprise security, or multi-tenant environments is beneficial.Strong technical ownership, sound judgment, and the ability to maintain high engineering standards.#J-18808-Ljbffr