Microsoft Purview/Defender for Endpoint Support SME

Summary

Join Avanade's Security Practice and support the implementation and operation of Microsoft Purview and Microsoft Defender for Endpoint within enterprise environment.

In this role, you will provide L2/L3 technical support, execute approved security configurations, troubleshoot incidents and implementation issues, support endpoint migrations, perform policy and control validation, and maintain accurate technical documentation.

Key Responsibilities

Microsoft Purview

- Support the implementation, configuration and ongoing operation of Microsoft Purview capabilities, including:

- Information Protection and sensitivity labels

- Data Loss Prevention and Endpoint DLP

- Data Lifecycle and Records Management

- Insider Risk Management

- Implement sensitivity labels, label publishing, auto-labelling, DLP policies, Endpoint DLP controls, insider-risk policies, communication-compliance policies, retention controls, records-management policies, eDiscovery cases, and audit requirements.

- Support policy testing, simulation, phased enforcement, issue investigation, and control validation.

- Troubleshoot L2/L3 issues involving labelling, DLP policy matches, endpoint controls, retention policies, permissions, and policy deployment.

Microsoft Defender for Endpoint

- Support Microsoft Defender for Endpoint implementation activities covering device onboarding, Endpoint Detection and Response, Defender Antivirus, Attack Surface Reduction, Device Control, Web Protection, network protection, automated investigation and remediation, indicators, and threat and vulnerability management

- Execute endpoint-security migrations from existing antivirus, EDR, or endpoint-protection platforms to Microsoft Defender for Endpoint, including discovery, readiness checks, pilot onboarding, coexistence validation, phased deployment, cutover validation, rollback support, and legacy-agent removal

- Investigate and resolve L2/L3 issues involving device onboarding, sensor health, connectivity, security policies, alerts, exclusions, platform compatibility and endpoint configuration.

- Perform technical testing, configuration validation, endpoint-health checks, migration validation, defect investigation, remediation, implementation-evidence collection, and deployment-readiness activities for Microsoft Defender for Endpoint

- Use the Microsoft Defender portal to review device inventory, alerts, vulnerabilities, exposure levels, security recommendations, and endpoint-security status
.
Skills and Experience

- 4+ years of relevant experience in cybersecurity, endpoint security, data protection or Microsoft security technologies.

- Hands-on experience providing L2 or L3 technical support, including incident investigation, troubleshooting, root-cause analysis, remediation and escalation.

- Strong hands-on expertise in at least one of the following: Microsoft Purview or Microsoft Defender for Endpoint.

- Experience configuring, testing, validating and troubleshooting Microsoft security controls in enterprise environments.

- Experience working with technical designs, configuration workbooks, test scripts, implementation procedures and operational runbooks.

- Strong understanding of go-live, Hypercare, warranty support, stakeholder evidence review, and L3 escalation handling

- Familiarity with other tools such Microsoft Entra ID, Microsoft Intune, Microsoft Defender XDR would be a bonus

- Relevant Microsoft certifications are desirable

- Experience working with client-facing delivery teams and coordinating with compliance, SOC, IT security, and operations teams is beneficial

- Strong ownership, clear advisory communication, structured issue management, and practical judgment when guiding configuration evidence review, remediation options, and support closure activities
.