Cybersecurity Engineer (Delivery)

Tech One Global Lanka Pvt Ltd. is seeking a Cybersecurity Engineer to join our Microsoft Cybersecurity delivery practice as a hands-on implementation specialist. This is a delivery-focused role responsible for configuring, deploying, and operationalizing Microsoft security solutions across customer projects to deliver outcomes that are secure, well-documented, and ready for handover. You will work across Microsoft Sentinel, Defender XDR, Entra ID, and baseline Azure and M365 security configurations under the guidance of senior security architects and project managers, building technical depth across the Microsoft security stack as you grow.

• Security Solution Implementation: Execute end-to-end technical delivery of Microsoft security projects, translating solution designs and scope documents into working, production-grade configurations. Own assigned implementation tasks, track progress against project plans, and proactively escalate blockers to relevant stakeholders to keep delivery on schedule.
• Microsoft Sentinel Deployment: Deploy and configure Microsoft Sentinel workspaces, including Log Analytics workspace setup, data connector onboarding across Microsoft and third-party sources, analytics rule configuration, KQL query development, watchlist creation, workbook setup, and SOAR playbook implementation using Logic Apps. Perform post-deployment validation to confirm data ingestion, alert triggering, and automation are functioning as designed.
• Defender XDR Onboarding & Configuration: Onboard and configure Defender for Endpoint (MDE) across Windows, macOS, and Linux platforms, including attack surface reduction (ASR) rule configuration, onboarding policy setup via Intune or Group Policy, and initial alert tuning. Configure Defender for Office 365 (MDO) anti-phishing, safe links, and safe attachments policies, and support Defender for Identity (MDI) sensor deployment and basic alert configuration.
• Entra ID & Identity Security Configuration: Implement Entra ID security configurations in line with solution design, including Conditional Access policy deployment, MFA rollout, SSPR setup, Privileged Identity Management (PIM) configuration, Identity Protection risk policy setup, and SSO/federation with third-party applications. Support hybrid identity configuration via Entra Connect, and troubleshoot synchronization issues arising during delivery.
• Baseline Security Posture Configuration: Apply Microsoft security baseline configurations across every engagement, including Defender for Cloud (MDC) enablement, Secure Score remediation actions, Azure Policy compliance baseline, RBAC design, Security Copilot, Key Vault setup, and network security baseline (NSG, Azure Firewall where in scope). Ensure delivered environments meet a defined security baseline before project handover and escalate requirements beyond baseline scope.
• Configuration Testing & Validation: Perform functional testing and validation of deployed security solutions to confirm they meet design intent and customer acceptance criteria. Identify and resolve configuration issues, integration failures, and policy conflicts during the delivery phase, escalating with clear diagnostic notes where senior involvement is required.
• Documentation, Handover & Knowledge Transfer: Produce accurate as-built documentation, configuration runbooks, and operational guides for every project. Deliver structured knowledge transfer to customer technical teams at project close, ensuring they can manage deployed solutions independently. Ensure clean handover to the support practice with documented environment details, known issues, and escalation contacts.
• Practice Contribution & Continuous Learning: Contribute implementation learnings, reusable configuration templates, and delivery notes back to the Security practice to improve consistency across future projects. Proactively maintain technical readiness through self-directed learning, certification pursuit, and awareness of Microsoft Security product updates that affect active or upcoming deliveries.