Senior Consultant Microsoft Security

Role Summary:

We are looking for an experienced Microsoft Security Solutions Architect to lead the design, implementation, and support of Microsoft security ecosystem across identity, endpoint, threat protection, and compliance. This role requires deep hands-on knowledge of Microsoft Intune, Defender suite, Entra ID, and Microsoft Sentinel, with a strong emphasis on real-world threat mitigation, including malware attack handling and DNS firewall configuration.

Key Responsibilities:

Solution Design & Implementation

• Architect and implement Microsoft Intune for device compliance, app management, conditional access, and policy deployment across Windows, macOS, iOS, and Android environments.
• Deploy and optimize Microsoft Defender for Endpoint, Identity, Office 365, and Defender for Cloud Apps in alignment with organizational security frameworks.
• Configure Microsoft Entra ID (Azure AD) features including Conditional Access, SSO, MFA, PIM, RBAC, and Identity Protection policies.
• Drive the adoption of Zero Trust Architecture, aligning endpoint protection and identity governance with customer risk management objectives.
• Implement and manage DNS Firewall solutions to block malicious domains and enhance threat visibility and control.
• Lead the detection, response, and mitigation of malware attacks, leveraging Microsoft security tools and incident response strategies.

Client Engagement & Advisory

• Conduct client security assessments and define Microsoft-centric security roadmaps and architectural recommendations.
• Deliver technical workshops, POCs, and pilot deployments for Intune, Defender, and Entra ID solutions.
• Act as a trusted advisor on Microsoft Security best practices, data protection (e.g., GDPR, ISO 27001), governance, and regulatory compliance.

Operations & Support

• Guide operational teams in incident detection, investigation, and remediation, especially related to malware, phishing, and endpoint threats.
• Maintain and update technical documentation including architectures, policies, configurations, and incident response procedures.
• Support scripting and automation for policy deployment, compliance monitoring, and operational efficiency using PowerShell and other tools.

Required Skills & Experience:

• 6+ years of hands-on experience with Microsoft security solutions and enterprise IT environments.

• Deep expertise in:

• Microsoft Intune / Endpoint Manager

• Microsoft Defender Suite (Defender for Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Entra ID / Azure AD, including Identity Governance, Conditional Access, and PIM
• Endpoint threat protection and malware remediation

• DNS Firewall technologies (e.g., Microsoft Defender for DNS, third-party DNS protection tools)

• Strong proficiency in PowerShell scripting, automation of compliance policies, and endpoint configurations.

• Familiarity with Microsoft Sentinel, Zero Trust frameworks, and modern workplace security models.
• Solid experience with incident response, endpoint telemetry, and real-world malware analysis and resolution.
• Excellent verbal and written communication skills; able to engage both technical and non-technical stakeholders.

Preferred Certifications:

• SC-200: Microsoft Security Operations Analyst
• SC-300: Microsoft Identity and Access Administrator
• SC-400: Microsoft Information Protection Administrator
• MD-102: Microsoft Endpoint Administrator
• Knowledge of integrations with third-party MDM, SIEM, DNS security, and IAM platforms is a plus.