Role overview
We are a Microsoft Solutions Partner and managed services provider. As an M365 Associate Consultant on our Security and Identity track, you will work within an existing security delivery team, managing M365 security posture, identity governance, and compliance for multiple clients simultaneously.
This is not internal IT support. You manage multiple client environments, own your work end to end, and are expected to flag risks proactively.
What you will do
- Administer Microsoft Entra ID — Conditional Access policies, MFA, SSPR, PIM, user lifecycle, and identity governance
- Manage Microsoft Defender for M365 — anti-phishing, Safe Links, Safe Attachments, threat investigation, and incident response
- Support Microsoft Purview compliance — DLP policies, sensitivity labels, retention policies, and eDiscovery basics
- Administer Microsoft Intune — device compliance policies, MDM/MAM, app protection policies, and device enrolment
- Monitor M365 Secure Score across client tenants — identify gaps, priorities, improvements, and drive implementation
- Respond to security alerts and incidents — triage, investigate, contain, and document
- Support identity synchronization using Entra Connect — sync health, attribute issues, and hybrid identity troubleshooting
- Build and maintain security SOPs, runbooks, and client-specific documentation
- Assist with tenant health monitoring, license management, and security reporting for managed accounts
Must have
- 3–5 years of hands-on M365 or security administration experience
- Microsoft Entra ID depth — Conditional Access, MFA, SSPR, user and group management, sign-in log analysis
- Microsoft Defender for M365 — policy configuration, threat investigation, alert triage
- Microsoft Purview — DLP and sensitivity labels at minimum; eDiscovery and retention as a plus
- Microsoft Intune — device compliance, MDM enrolment, app protection policies
- PowerShell for M365 and Entra ID administration — must be able to write and adapt scripts
- Understanding of Zero Trust principles and M365 Secure Score
- At least one active Microsoft security certification — SC-900, SC-300, or MS-102
- Good written and spoken English — you will communicate directly with clients
- Proactive and Excellent Documentation Skills
Good to have
- Exchange Online administration — mail flow, EOP, anti-spam, message trace
- Microsoft Sentinel — basic log monitoring and alert rules
- Azure AD Connect / Entra Connect — hybrid identity sync and troubleshooting
- Experience working in an MSP, consulting firm, or Microsoft partner
What we are not looking for
Candidates with M365 breadth but no security depth — knowing where Defender is in the portal is not enough
