Microsoft Security Consultant
Ekco
- Ireland
- Mid Level
- Bachelor's degree
- Posted
Skills
Required
- Azure
- Microsoft Defender
- Microsoft Sentinel
- Microsoft 365
- Microsoft Defender for Cloud
- Microsoft Entra
- Microsoft Purview
- Microsoft environments
- Bicep / Terraform
- GitHub
Preferred
- CISSP / CCSP / CISM certification
- Azure landing zones / Azure Policy / Microsoft Sentinel integration / identity governance / privileged access / data security
- cloud workload
- data protection
- security operations
Join our team as a Microsoft Security Consultant, where you will help enterprise and regulated clients assess, design, and implement secure Microsoft cloud solutions. You will lead discovery and security envisioning workshops, provide technical guidance, and communicate recommendations to technical and executive stakeholders. This is a remote-based role, with a preference for applicants based in Ireland.
Experience delivering Microsoft security solutions in enterprise or regulated environments and applying frameworks such as ISO 27001, NIST, CIS, GDPR, NIS2 or DORA
Responsibilities
- Lead client discovery, consultancy-led security envisioning and design workshops to establish business objectives, current-state risks, target outcomes and prioritised security roadmaps.
- Assess, design, implement and optimise security solutions across Microsoft 365, Azure and hybrid environments, including Microsoft Defender, Microsoft Sentinel, Microsoft Entra and Microsoft Purview capabilities.
- Communicate architecture decisions, delivery progress, risks and recommendations to engineers, security teams, business leaders and executive stakeholders.
- Strong understanding of identity, endpoint, email, collaboration, cloud workload, data protection and security operations controls, including Zero Trust principles
Requirements
- At least four years’ practical experience in information security, including substantial delivery experience across Microsoft 365, Azure or hybrid Microsoft environments
- Proven consulting and stakeholder-management skills, including leading discovery, consultancy-led security envisioning and technical design workshops
- Strong communication skills, a service-oriented approach, personal initiative and the ability to work independently or as part of a multidisciplinary delivery team
- Ability to produce clear technical designs, architecture diagrams, implementation documentation, runbooks, risk findings and executive-level recommendations
A relevant degree or equivalent professional experience
- Practical experience with Infrastructure as Code using Bicep and/or Terraform, together with an understanding of source control, CI/CD pipelines and governed deployment practices
- Required Microsoft certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), together with either Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)
- Hands-on experience with Microsoft security technologies such as Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Microsoft Purview
- Experience assessing client environments and translating business, risk and regulatory requirements into security designs, implementation plans and remediation roadmaps
- Experience supporting pre-sales, developing statements of work or creating reusable consulting and delivery assets
- Desirable Microsoft certifications: Microsoft Certified: Information Security Administrator Associate (SC-401), Microsoft Certified: Azure Administrator Associate (AZ-104) and Microsoft Certified: Cybersecurity Architect Expert (SC-100). Progress towards, or completion of GitHub Copilot (GH-300), Develop AI Apps and Agents on Azure (AI-103) and Agentic AI Business Solutions Architect (AB-100)
Preferred
- CISSP, CCSP or CISM certification, or equivalent practical experience
- Experience with Azure landing zones, Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel integration, identity governance, privileged access or data security
