Senior Microsoft XDR Deployment Engineer (Lead)

About the role

A senior Microsoft XDR Deployment Engineer is sought, with strong hands-on experience deploying and managing Microsoft security solutions in enterprise environments. The role leads end-to-end deployments from planning through production, working closely with customers and internal teams. It suits a senior, delivery-focused professional who can work onsite or remotely depending on business needs.

Key responsibilities

• Lead end-to-end deployment of Microsoft XDR solutions across enterprise environments
• Deploy and configure Defender for Endpoint (Windows, Linux, macOS, servers), Defender for Office 365, Defender for Identity (including sensor deployment and gMSA), Defender for Servers and Defender for Cloud
• Onboard endpoints and servers via Intune, GPO, scripts, MDE onboarding packages and Azure Arc
• Configure ASR, EDR policies, AV policies, firewall rules and device control; migrate from third-party solutions to Microsoft XDR
• Handle enterprise-scale deployments (500+ endpoints/servers) and implement email security policies (anti-phishing, anti-spam, Safe Links, Safe Attachments)
• Configure identity protection and advanced detections in Defender for Identity, and enable cloud workload protections for Azure, hybrid and multi-cloud environments
• Create deployment documents, SOPs and reports, and provide L3 support during POC, pilot and production rollout
• Troubleshoot sensors, agents, extensions, policies and connectivity, resolve conflicts with existing security tools, and support incident response and investigations

Required profile

• Minimum 5+ years of experience
• Enterprise-scale deployment experience (500+ endpoints/servers)
• Strong understanding of EDR, XDR, identity, email and cloud security
• Knowledge of Active Directory, macOS and Linux
• Preferred: Microsoft SC-200, SC-300, AZ-500 or other cybersecurity certifications