Principal Consultant

Job description

## We Help the World Be Everyday Ready™ Today's threatscape is relentless. So are we. At Cyderes, we build practical [Identity & Access Management (IAM)](https://www.cyderes.com/solutions/identity-and-access-management), [Exposure Management](https://www.cyderes.com/solutions/exposure-management), and risk programs, helping organizations stop active threats fast with [Managed Detection & Response (MDR)](https://www.cyderes.com/solutions/managed-detection-and-response) that integrates with existing tools. Powering it all is [Meridian](https://www.cyderes.com/solutions/meridian/), our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. 🏆 Great Place to Work® Certified™ **About the Role** We are seeking an experienced **Principal Consultant, Microsoft Security** to join our Microsoft Security team at **Cyderes**. In this role, you will be instrumental in designing, implementing, and developing robust security architectures based on the Microsoft security stack. You will partner with our enterprise clients to secure their cloud, hybrid, and on-premises environments, ensuring optimal protection using industry best practices. You will report to the Senior Director, Microsoft Consulting. **Responsibilities** - **Leading Engagements**: As a Principal Consultant you will be expected to lead complex Microsoft Security engagements, help manage the project team and deliverables, and build client relationships. - **Endpoint Protection:** Implement, configure, and manage **Microsoft Defender for Endpoint** to protect, detect, investigate, and respond to advanced overall threats across the enterprise network. - **Identity & Access Management (IAM):** Architect and maintain secure access controls and identities using **Microsoft Entra ID** (formerly Azure AD) and legacy **Active Directory** environments. Implement robust Conditional Access policies, MFA, and SSO solutions. - **Threat Hunting & Remediation:** Collaborate with internal or client SOC teams to analyze security alerts, investigate potential breaches, and lead remediation efforts. - **Consulting & Advisory:** Act as a trusted subject matter expert for clients. Conduct comprehensive security assessments, identify vulnerabilities, and present actionable strategic recommendations to improve their security posture. - **Documentation & Enablement:** Create comprehensive technical documentation, architecture diagrams, runbooks, and provide targeted training to client IT staff. **Requirements:** - **Experience:** **10 plus years** of hands-on professional experience in cybersecurity, infrastructure engineering, or a related consulting role. - **Identity Management:** Deep understanding and practical experience managing both cloud and on-premises identity systems, specifically **Microsoft Entra ID** and **Active Directory**. - **Consulting Skills:** Strong interpersonal and communication skills, with the ability to effectively translate complex technical concepts to technical and non-technical stakeholders alike. - **Problem-Solving:** Strong analytical mindset with the ability to troubleshoot complex security issues and rigorously evaluate security risks. - Relevant Microsoft certifications, such as Microsoft Certified: Security Operations Analyst Associate (SC-200), Identity and Access Administrator Associate (SC-300), Azure Security Engineer Associate (AZ-500), or Cybersecurity Architect Expert (SC-100). - Experience with other components of the Microsoft Defender XDR suite (Defender for Identity, Defender for Office 365, Defender for Cloud Apps). - Familiarity with major compliance and regulatory frameworks (e.g., NIST, CIS Controls, ISO 27001).