Microsoft 365 Security Analyst – Intune, Purview & Endpoint Management

Gejits Infotech Inc is seeking an experienced Security Analyst to join our state Client to support Microsoft 365 end-user applications and endpoint security technologies. The Security Analyst will work under the direction of Network and End User Support leadership to configure, maintain, secure, and support enterprise end-user devices and applications.

This role will focus heavily on Microsoft security and device-management tools, including Microsoft Intune, BitLocker, Microsoft Purview, Microsoft Defender, sensitivity labels, and related Microsoft 365 technologies.

The Security Analyst will also assist with security research, policy development, implementation of security tools, software vulnerability remediation, application updates, technical documentation, and knowledge transfer to internal IT staff.

Key Responsibilities

• Enroll and manage Windows, iOS, iPadOS, Android, and macOS devices through Microsoft Intune and Microsoft 365.
• Configure and maintain endpoint security policies, compliance policies, configuration profiles, and security baselines.
• Package and deploy Win32, line-of-business, and Microsoft Store applications through Intune.
• Create new software installations and update applications currently installed on end-user devices.
• Configure Windows Update for Business deployment rings, quality updates, and feature updates.
• Configure and manage BitLocker encryption policies and recovery-key processes.
• Create and deploy Microsoft Purview sensitivity labels to classify, restrict, and encrypt documents.
• Configure trainable classifiers, Exact Data Match, sensitive information types, and related data-protection capabilities.
• Evaluate Microsoft 365 licensing tiers, including E3, E5, and Business Premium, to determine available security features and appropriate implementation options.
• Research, develop, document, and implement endpoint-security policies, standards, best practices, and technical baselines.
• Inventory software installed on end-user devices.
• Identify and remediate installed software vulnerabilities.
• Deploy software patches, upgrades, and security updates.
• Provide technical support for Microsoft 365 applications, Microsoft desktop products, and end-user devices.
• Develop technical documentation, operational procedures, and implementation guides.
• Transfer technical knowledge and provide guidance to internal IT staff.
• Collaborate with network, security, infrastructure, and end-user support teams.

Mandatory Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or a related field, or equivalent professional experience.
• Minimum of five years of professional information technology experience.
• Demonstrated experience with architecture design, software development, database management systems, and systems integration in multi-platform environments.
• Extensive experience supporting Microsoft 365 applications and end-user devices.
• Extensive experience with Microsoft security and device-management technologies.
• Strong hands-on experience with Microsoft Intune.
• Experience enrolling and managing Windows, iOS, iPadOS, Android, and macOS devices.
• Experience packaging and deploying Win32, line-of-business, and Microsoft Store applications.
• Experience configuring Windows Update for Business rings and feature updates.
• Experience with BitLocker configuration and endpoint encryption.
• Experience configuring Microsoft Purview sensitivity labels and information-protection policies.
• Experience with trainable classifiers, Exact Data Match, and sensitive information types.
• Knowledge of Microsoft 365 E3, E5, and Business Premium licensing and associated security capabilities.
• Extensive experience providing desktop support for Microsoft products.
• Experience managing, updating, and remediating software installed on end-user devices.
• Strong technical documentation, troubleshooting, communication, and knowledge-transfer skills.

Preferred Qualifications

• Experience implementing Microsoft security baselines and endpoint compliance standards.
• Experience with Microsoft Defender for Endpoint or related Microsoft security products.
• Experience working in a large enterprise, public-sector, regulated, or security-focused environment.
• Experience supporting vulnerability-management and software-remediation initiatives.
• Relevant Microsoft certifications are preferred.