Principal Consultant – Azure, IAM & Endpoint Solutions

Principal Consultant- Azure, IAM & Endpoint Solutions

Remote, Global locations welcome (North American business hours required)

Job Summary:

The Principal Consultant will lead the architecture, deployment, and optimization of Microsoft security and endpoint management solutions, with deep specialization inMicrosoftActive Directoryon-premise/Entra ID,Microsoft Defender XDR,Microsoft Intune,andAzure Infrastructure. This role blends advanced technicalexpertise, advisory leadership, and presales engagement to deliver secure, scalable, and modern security operations for enterprise clients.

Key Responsibilities:

Presales & Client Engagement

• Support presales through clientarchitectureworkshops, solution demonstrations, scoping sessions, and proposal development.

• Translate business requirements into modern security architectures that drive measurable outcomes.

• Overseethetechnicalquality of project delivery in collaboration with the Project Manager and actively supportSenior and Associate Consultantsthroughoutthe solutionBuildandimplementation.

Security Architecture & Solution Design

• Architect end-to-end security solutionsleveragingMicrosoftIAM,Azure,Microsoft Defender, andMicrosoftIntuneto meet enterprise security and compliance requirements.

• Lead complex security transformation projects from design through implementation, ensuringhigh qualityoutcomes and smooth operational readiness.

Microsoft IAM (Active Directory/Entra ID)

• Design identity-centric security controls across Entra ID, Conditional Access, MFA, and identity governance.

• Align endpoint compliance, risk detections, andreal-timesignals with Conditional Access policies.

Microsoft Defender XDR

• Implement and tune Microsoft Defender for Endpoint, Identity, Cloud Apps, and Office 365.

• Configure EDR, threat analytics, attack surface reduction, advanced hunting, and automated remediation.

• Provideexpert guidance on XDR strategy, identity protection, cloud app governance, andcross-domaincorrelation in Defender.

Microsoft Intune (Endpoint Security & Management)

• Deploy, configure, and manage Intune for MDM/MAM across Windows, macOS, iOS, and Android.

• Build compliance policies, device configuration profiles, app protection policies, and conditional access integrations.

• Lead modernization initiatives including Autopilot,zero touchprovisioning, andcloud baseddevice governance.

Azure Infrastructure

• Deploy and configure MicrosoftAzureinfrastruture, includingSentinel(SIEM, SOC)workspaces, data connectors, analytics rules, automation playbooks, and incident response workflows.

Identity, Access & Conditional Access

Leadership & Mentorship

• Mentor consultants and analysts across SOC, identity, and endpoint management domains.

• Provide training sessions to clients or internal teams on Sentinel, Defender, and Intune best practices.

• Collaborate closely with current Security Service managers to refine SOC processes, ensuring alignment with organizationalobjectivesand evolving threat landscapes.

• Facilitate the identification and implementation of process improvements to enhance detection, response, and reporting capabilities.

Operational Excellence

• Troubleshoot Sentinel ingestion issues, Defender signal quality gaps, and Intune device management challenges.

• Deliver clear design documentation, runbooks, and operational handover materials.

• Assistwith lab environments, testing, and lifecycle management of security configurations.

Required Qualifications:

• 10+ years of experiencein IT security, SOC operations, endpoint management, or cloud security architecture.

• Deephands-onexpertisewithMicrosoftIAM, Azure,Sentinel, Microsoft Defender XDR, and Microsoft Intune.

• Strongunderstandinginfrasturemanagement andendpoint security, and identity-driven security models.

• Provenability to architect and lead large-scale security implementations.

• Excellentpresales, communication, and client-facing skills.

Preferred Certifications

• AZ-500: Azure Security Engineer

• MD-102 / MD-101: Endpoint Administrator

• SC-200: Microsoft Security Operations Analyst

• SC-300: Identity and Access Administrator

• SC-400: Information Protection Administrator

Preferred Skills:

• Experience with MITRE ATT&CK mapping, threat modeling, and detection engineering.

• Familiarity with Microsoft Purview for compliance and DLP (nice-to-have).

• Experience supporting SOC teams and global enterprise security operations.

• Ability to lead multi-region rollouts and complex modernization projects.

• KQL programming

• ARM Templates

• Bicep

Work Conditions:

• This jobrequiresworkingNorth Americanbusiness hours withcustomers and colleagues.We’reaproject driven company, andweneed to followthe workinghours ofourCustomers(EST)

• Overtime may berequiredto meet project deadlines.

• Participation in client workshops, presentations, and training sessions is expected.

• Occasional travel may berequiredto meet clients or internal stakeholders.