Training & Knowledge Transfer Engineer - MDE, MDCA & Microsoft Purview

• We are looking for a Training & Knowledge Transfer Engineer with strong hands-on experience in Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender XDR, Microsoft Intune, and Microsoft Purview
• The role will be responsible for planning and delivering technical training, workshops, demonstrations, knowledge-transfer sessions, and operational handover activities following Microsoft security implementations.
• The ideal candidate should be technically strong enough to explain, demonstrate, troubleshoot, and train teams on the implemented Microsoft security solutions, while also producing high-quality documentation, SOPs, runbooks, and handover materials.

Key Responsibilities

Plan and deliver structured training and knowledge-transfer sessions for MDE, MDCA, and Microsoft Purview based on approved designs, implemented configurations, SOPs, and handover plans.

Conduct technical workshops covering:

MDE onboarding

• MDE sensor health
• Intune security policy deployment
• MDCA connectors and data sources
• Security policies and alert behaviour
• Microsoft Purview Information Protection
• DLP

Insider Risk Management (IRM)

Data Lifecycle Management (DLM)

Demonstrate implemented configurations and explain policy behaviour, monitoring, troubleshooting, and operational processes.

Prepare and maintain:

Training presentations

• Demonstration materials
• Operational guides
• Troubleshooting guides
• SOPs
• Runbooks
• Knowledge articles
• Recorded training sessions
• Handover documentation
• Conduct operational handover sessions covering:

Support processes

• Roles and responsibilities
• Escalation procedures
• Ticket handling
• Monitoring requirements
• Troubleshooting
• Service management processes
• Coordinate training activities with client:

IT

Endpoint

• Intune
• Identity
• Compliance
• SOC

Operations teams

• Identify knowledge gaps and tailor training accordingly.
• Maintain training attendance, feedback, knowledge assessments, action trackers, open-question logs, SOP updates, handover status, and completion reports.
• Support project-to-operations transition and ensure agreed knowledge-transfer deliverables are completed.

Mandatory Technical Skills

5+ years of experience in security training, technical knowledge transfer, endpoint support, Microsoft 365 security operations, platform enablement, or enterprise technology delivery.

Hands-on experience with:

Microsoft Defender for Endpoint (MDE)

Microsoft Defender for Cloud Apps (MDCA)

Microsoft Defender XDR

Microsoft Purview

Microsoft Intune

Strong knowledge of:

MDE onboarding and policies

• MDE sensor health
• MDCA connectors
• MDCA alerts and data sources
• Purview Information Protection
• Sensitivity labels
• DLP

Endpoint DLP

Insider Risk Management (IRM)

Data Lifecycle Management (DLM)

Strong understanding of technical training, workshop facilitation, product demonstrations, knowledge assessment, documentation, SOP development, and operational handover.

Training & Knowledge Transfer Skills

• The candidate must be able to:
• Conduct classroom and virtual technical training.
• Conduct demonstration-led workshops.
• Explain complex Microsoft security concepts to technical and non-technical audiences.
• Perform train-the-trainer sessions.
• Create structured training materials and presentations.
• Demonstrate implemented configurations.
• Conduct knowledge assessments.
• Identify and close knowledge gaps.
• Create operational SOPs, runbooks, and troubleshooting documentation.
• Support transition from project implementation to BAU operations.

Consulting & Delivery Skills

• Engage directly with client IT, Endpoint, Compliance, SOC, and Operations stakeholders.
• Lead technical workshops independently.
• Translate technical configurations into easy-to-understand operational guidance.
• Manage training schedules, participants, action items, and completion tracking.
• Demonstrate strong ownership and stakeholder-management skills.
• Work effectively in structured enterprise project and transition environments.

Support regulated or security-sensitive enterprise environments