Microsoft Technical Security Consultant (Defender, Intune & Entra ID SME)

Job description

Summary At Avanade, cybersecurity consultants are innovators, risk-takers, and challengers of the status quo. If you’re an experienced Microsoft Security Consultant, who can help our clients solve complex Cybersecurity business challenges, this might be the perfect opportunity for you. Engage in exciting, complex projects and play a vital role in transforming clients' Cyber Defense strategies. Collaborate with a team of experts, share knowledge, and develop thought leadership. Stay at the forefront of Microsoft Security technology and grow into a leader in Cyber Defense. Together we do what matters. Key Responsibilities Build / Implement security capabilities such as Microsoft Intune, Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity, Microsoft Entra ID P1/P2 etc. Design, secure and manage hybrid identity environments across on-premises Active Directory and Entra ID (Azure AD) to ensure resilience, integrity and threat resistance. Design and implement Entra ID solutions including Conditional Access Policy frameworks and Identity Governance (access reviews, entitlement management, lifecycle workflows). Conduct comprehensive security assessments across customer environments evaluating their deployment of Defender, Sentinel, Purview, Entra and Conditional Access, and deliver prioritized improvement roadmaps. Build strong relationships with clients, acting as a trusted advisor on best practices and Microsoft security technologies. Stay updated on industry trends, competitive landscape and emerging data protection threats to inform solution development and strategy. Conduct workshops, training and knowledge transfers to internal teams and external clients. . Skills & experiences 6+ years of progressive experience in IT and cybersecurity, with a significant portion dedicated to Data Security & Information labeling & classification Experience integrating AD and Entra ID with enterprise IAM processes including provisioning, deprovisioning and access governance workflows. Hand-on experience in hybrid identity design including synchronization, federation and secure integration with SaaS applications. Hands-on experience with Conditional Access Policies aligned to Zero Trust principles incorporating device compliance, risk-based authentication, session controls and integration with Defender for Cloud Apps for real-time enforcement. Hands-on experience in identity security posture using risk-based policies and investigating suspicious sign-in activities, managing Privileged Identity Management (PIM) for just-in-time access and role governance and supporting access reviews, entitlement management, and user lifecycle processes (joiner/mover/leaver). Demonstrated expertise in endpoint, on-premises, cloud security concepts, features and reference architectures across the Microsoft platform. Strong problem-solving skills and the ability to work independently. Exceptional written and verbal communication skills, with a proven ability to articulate complex technical and business concepts clearly and persuasively to all levels of an organization. Highly desirable certifications: Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Implement Microsoft Purview Information Protection, CISSP, CDPSE. .