Role overview

We are a Microsoft Solutions Partner and managed services provider. As an M365 Associate Consultant on our Security and Identity track, you will work within an existing security delivery team, managing M365 security posture, identity governance, and compliance for multiple clients simultaneously.

This is not internal IT support. You manage multiple client environments, own your work end to end, and are expected to flag risks proactively.

What you will do

Administer Microsoft Entra ID — Conditional Access policies, MFA, SSPR, PIM, user lifecycle, and identity governance
Manage Microsoft Defender for M365 — anti-phishing, Safe Links, Safe Attachments, threat investigation, and incident response
Support Microsoft Purview compliance — DLP policies, sensitivity labels, retention policies, and eDiscovery basics
Administer Microsoft Intune — device compliance policies, MDM/MAM, app protection policies, and device enrolment
Monitor M365 Secure Score across client tenants — identify gaps, priorities, improvements, and drive implementation
Respond to security alerts and incidents — triage, investigate, contain, and document
Support identity synchronization using Entra Connect — sync health, attribute issues, and hybrid identity troubleshooting
Build and maintain security SOPs, runbooks, and client-specific documentation
Assist with tenant health monitoring, license management, and security reporting for managed accounts

Must have

3–5 years of hands-on M365 or security administration experience
Microsoft Entra ID depth — Conditional Access, MFA, SSPR, user and group management, sign-in log analysis
Microsoft Defender for M365 — policy configuration, threat investigation, alert triage
Microsoft Purview — DLP and sensitivity labels at minimum; eDiscovery and retention as a plus
Microsoft Intune — device compliance, MDM enrolment, app protection policies
PowerShell for M365 and Entra ID administration — must be able to write and adapt scripts
Understanding of Zero Trust principles and M365 Secure Score
At least one active Microsoft security certification — SC-900, SC-300, or MS-102
Good written and spoken English — you will communicate directly with clients
Proactive and Excellent Documentation Skills

Good to have

Exchange Online administration — mail flow, EOP, anti-spam, message trace
Microsoft Sentinel — basic log monitoring and alert rules
Azure AD Connect / Entra Connect — hybrid identity sync and troubleshooting
Experience working in an MSP, consulting firm, or Microsoft partner

What we are not looking for

Candidates with M365 breadth but no security depth — knowing where Defender is in the portal is not enough