Microsoft Cloud Security / IAM Architect

​ ​​ We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within. We offer a Full Benefits package including: Competitive Employee Health Insurance options including dental 100% company paid vision plan 401K plan with generous company match and no vesting period 100% company paid life insurance 100% company paid long and short-term disability insurance Training allowance PTO and more Microsoft Cloud Security / IAM Architect – Remote Opportunity Role: This role is asking for far more than default Dynamics security. The role requires experience with Conditional Access, PIM, least privilege, Dataverse column/field protections, whistleblower protection, audit/investigation segregation, record-level restriction, privileged-action logging, security testing, audit logging, monitoring, and incident-response documentation. Required: 7+ years cybersecurity/IAM/cloud security experience 3+ years Microsoft cloud identity/security experience Microsoft Entra ID Conditional Access Privileged Identity Management RBAC/least privilege MFA and authentication controls Dataverse/Dynamics security concepts Sensitive-data protection Security logging and audit Security testing/validation Incident-response playbooks Experience designing administrative/emergency access Experience documenting security control configurations for regulated systems Required Dataverse familiarity: Candidate does not need to be a Power Platform developer, but must understand: Security roles Business units Teams Record ownership/sharing Table privileges Column/field security Audit Restricted record access Interaction between Dataverse controls and Power Platform solutions Preferred certifications: One or more: CISSP SC-100 Cybersecurity Architect AZ-500 Azure Security Engineer SC-300 Identity and Access Administrator Microsoft Power Platform security experience/certification Strong differentiators: Government Inspector General/security experience Whistleblower/confidential investigative records CJIS, healthcare, financial, legal, regulatory, or similarly restricted datasets Microsoft Purview/DLP Sentinel or equivalent SIEM integration “We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status” Texting Privacy Policy Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Message frequency will vary depending on the application process.Msg & data rates may apply. OPT out at any time by texting "Stop".