Basic Job Functions

The Nucor Business Technology (NBT) Identity and Access Management Team (IAM) is seeking a skilled and experienced Senior Systems Engineer. Individuals who meet the minimum qualifications and are interested in this opportunity should upload a resume when applying online.

This role was created in direct response to growing organizational demands around data classification, policy enforcement, AI agent governance, and the secure deployment of Microsoft Copilot and related M365 platforms - priorities identified and approved at the leadership level.

The Senior Systems Engineer is responsible for operationalizing Microsoft Purview, governing AI usage across the enterprise, and ensuring data integrity as AI adoption accelerates.

Responsibilities include but not limited to:

- Designing and operationalizing enterprise data classification using Microsoft Purview - sensitivity labels, DLP policies, retention, Adaptive Protection, and auto-labeling via trainable classifiers.

- Governing data access for Microsoft 365 Copilot and AI-integrated workloads - enforcing label policies, scoping SharePoint/OneDrive permissions, and monitoring AI-driven data access through Copilot activity reports and Purview audit logs.

- Supporting Purview Insider Risk Management and Communication Compliance and implementing controls.

- Identifying and implementing automation opportunities across our product stack.

- Serving as a technical lead and advisor across Security, Identity, Data, and Platform teams - contributing to long-term governance frameworks, documentation, and organizational upskilling.

- Safety is the most important part of all jobs within Nucor; therefore, candidates must be able to demonstrate the ability to initiate, lead, and uphold safety policies, practices, procedures, and housekeeping standards at all times.

Minimum Requirements:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, related discipline, or equivalent combination of experience and education.

- 5+ years of hands-on experience in security, identity, or data governance roles in production M365 or Azure environments.

- 3+ years of direct, production Microsoft Purview experience across Information Protection and Data Loss Prevention.

- Demonstrated ability to design and implement classification frameworks - sensitivity labels, DLP policies, and auto-labeling strategies - at organizational scale.

- Experience working cross-functionally to deliver governance outcomes.

Detailed Selection Criteria:

- Teamwork: Working as part of a coordinated effort with others to achieve a common goal.

- Problem Solving & Judgment/Decision Making: Identifying problems, gathering and reviewing relevant information, and weighing options to make informed decisions and take effective action.

- Communication Skills: The ability to give full attention to what others are saying and communicating information so that others will understand.

- Time Management: Managing one's own time and/or the time of others.

Preferences:

- Familiarity with data privacy and security frameworks relevant to a manufacturing environment (e.g., NIST CSF, CIS Controls, CCPA, TISAX).

- Experience governing Microsoft 365 Copilot deployments, including data access scoping and Copilot activity auditing.

- Experience using PowerShell to automate Purview administration, DLP policy management, and compliance reporting.

- Microsoft Graph API proficiency for compliance automation, label policy management, and audit log workflows.

- Hands-on Microsoft Sentinel experience - KQL queries, workbooks, and governance-related alerting.

- Experience using ITIL methodology and Freshservice is a plus.

- Microsoft based certifications in this space are a plus (e.g., Microsoft Information Protection Administrator, Microsoft 365 Administrator Associate, or AZ-500 - Microsoft Azure Security Engineer Associate.

Salary Range: $186,637 - $226,863 CAD annually