We are looking for a Training & Knowledge Transfer Engineer with strong hands-on experience in Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender XDR, Microsoft Intune, and Microsoft Purview.
The role will be responsible for planning and delivering technical training, workshops, demonstrations, knowledge-transfer sessions, and operational handover activities following Microsoft security implementations.
The ideal candidate should be technically strong enough to explain, demonstrate, troubleshoot, and train teams on the implemented Microsoft security solutions, while also producing high-quality documentation, SOPs, runbooks, and handover materials.
Key Responsibilities
- Plan and deliver structured training and knowledge-transfer sessions for MDE, MDCA, and Microsoft Purview based on approved designs, implemented configurations, SOPs, and handover plans.
- Conduct technical workshops covering:
- MDE onboarding
- MDE sensor health
- Intune security policy deployment
- MDCA connectors and data sources
- Security policies and alert behaviour
- Microsoft Purview Information Protection
- DLP
- Insider Risk Management (IRM)
- Data Lifecycle Management (DLM)
- Demonstrate implemented configurations and explain policy behaviour, monitoring, troubleshooting, and operational processes.
- Prepare and maintain:
- Training presentations
- Demonstration materials
- Operational guides
- Troubleshooting guides
- SOPs
- Runbooks
- Knowledge articles
- Recorded training sessions
- Handover documentation
- Conduct operational handover sessions covering:
- Support processes
- Roles and responsibilities
- Escalation procedures
- Ticket handling
- Monitoring requirements
- Troubleshooting
- Service management processes
- Coordinate training activities with client:
- IT
- Endpoint
- Intune
- Identity
- Compliance
- SOC
- Operations teams
- Identify knowledge gaps and tailor training accordingly.
- Maintain training attendance, feedback, knowledge assessments, action trackers, open-question logs, SOP updates, handover status, and completion reports.
- Support project-to-operations transition and ensure agreed knowledge-transfer deliverables are completed.
Mandatory Technical Skills
- 5+ years of experience in security training, technical knowledge transfer, endpoint support, Microsoft 365 security operations, platform enablement, or enterprise technology delivery.
- Hands-on experience with:
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender for Cloud Apps (MDCA)
- Microsoft Defender XDR
- Microsoft Purview
- Microsoft Intune
- Strong knowledge of:
- MDE onboarding and policies
- MDE sensor health
- MDCA connectors
- MDCA alerts and data sources
- Purview Information Protection
- Sensitivity labels
- DLP
- Endpoint DLP
- Insider Risk Management (IRM)
- Data Lifecycle Management (DLM)
- Strong understanding of technical training, workshop facilitation, product demonstrations, knowledge assessment, documentation, SOP development, and operational handover.
Training & Knowledge Transfer Skills
The candidate must be able to:
- Conduct classroom and virtual technical training.
- Conduct demonstration-led workshops.
- Explain complex Microsoft security concepts to technical and non-technical audiences.
- Perform train-the-trainer sessions.
- Create structured training materials and presentations.
- Demonstrate implemented configurations.
- Conduct knowledge assessments.
- Identify and close knowledge gaps.
- Create operational SOPs, runbooks, and troubleshooting documentation.
- Support transition from project implementation to BAU operations.
Consulting & Delivery Skills
- Engage directly with client IT, Endpoint, Compliance, SOC, and Operations stakeholders.
- Lead technical workshops independently.
- Translate technical configurations into easy-to-understand operational guidance.
- Manage training schedules, participants, action items, and completion tracking.
- Demonstrate strong ownership and stakeholder-management skills.
- Work effectively in structured enterprise project and transition environments.
- Support regulated or security-sensitive enterprise environments