Overview
The Microsoft 365 Security Consultant will lead the initiative to enhance and document the security posture of a cloud-first boutique finance house utilizing Microsoft 365 technologies. This role involves working closely with a lean technical team and reporting directly to the technical MD, driving the successful configuration and hardening of Entra ID, Intune, and associated services within a modern Azure environment.
Responsibilities
- Develop and implement a detailed hardening plan for Microsoft 365 security components.
- Configure Entra ID, Intune, Defender, Purview, and Sentinel according to best practices.
- Collaborate with the technical MD to establish project delivery plans and outcomes.
- Manage and document security standards regarding identity, privileged access, and data protection.
- Ensure compliance with organizational policies for permissions and access control.
- Create runbooks and handover documentation for future management.
- Utilize PowerShell and Azure CLI for system automation and management tasks.
- Oversee the rollout of Conditional Access and related security measures in a phased manner.
Requirements
- Proven experience in a cloud-native environment, specifically with Azure and Microsoft 365.
- Hands-on knowledge of Entra ID features such as Conditional Access and Privileged Identity Management (PIM).
- Extensive experience with Intune, including compliance settings and Autopilot configurations.
- Familiarity with security tools like Microsoft Defender for Endpoint and Sentinel.
- Ability to deliver a Microsoft 365 tenant baseline independently.
- Experience using PowerShell and Azure Automation for operational tasks.
- A background in regulated or financial services environments is a plus.
- Knowledge of developing Conditional Access as code and using Azure AI tools is desirable.