Microsoft Security Consultant

As a trusted consultant, you will lead discovery and security envisioning workshops, provide technical guidance from pre-sales through delivery and handover, and communicate recommendations clearly to technical and executive stakeholders. This is a remote-based role, with a preference for applicants based in Ireland, particularly Dublin. Occasional travel to client sites may be required.

• Microsoft security delivery: Assess, design, implement and optimise security solutions across Microsoft 365, Azure and hybrid environments, including Microsoft Defender, Microsoft Sentinel, Microsoft Entra and Microsoft Purview capabilities.

• Secure cloud architecture: Translate security, technical and regulatory requirements into practical architectures, configuration standards and implementation plans aligned with Zero Trust principles and Microsoft guidance.

• Infrastructure as Code: Contribute to repeatable, governed cloud deployments using Infrastructure as Code, with practical application of Bicep and/or Terraform, source control and deployment pipelines.

• Security assessment and assurance: Conduct security reviews, posture assessments, gap analyses and design assurance activities; document risks and produce prioritised remediation recommendations.

• Implementation and integration: Configure and integrate Microsoft security controls across identity, endpoints, email, collaboration, cloud workloads, data protection and security operations.

• Operational readiness: Produce clear technical designs, configuration records, runbooks and handover artefacts, and help clients operationalise and sustain implemented controls.

• Stakeholder engagement: Communicate architecture decisions, delivery progress, risks and recommendations to engineers, security teams, business leaders and executive stakeholders.

• Pre-sales and practice development: Support solution shaping, estimates and statements of work, and contribute to reusable delivery methods, architecture patterns and service assets.

• Technical leadership: Act as a subject-matter expert, mentor colleagues and remain current with Microsoft security capabilities, emerging threats and industry good practice.

Requirements

• At least four years’ practical experience in information security, including substantial delivery experience across Microsoft 365, Azure or hybrid Microsoft environments.

• Hands-on experience with Microsoft security technologies such as Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Microsoft Purview.

• Experience assessing client environments and translating business, risk and regulatory requirements into security designs, implementation plans and remediation roadmaps.

• Proven consulting and stakeholder-management skills, including leading discovery, consultancy-led security envisioning and technical design workshops.

• Practical experience with Infrastructure as Code using Bicep and/or Terraform, together with an understanding of source control, CI/CD pipelines and governed deployment practices.

• Strong understanding of identity, endpoint, email, collaboration, cloud workload, data protection and security operations controls, including Zero Trust principles.

• Ability to produce clear technical designs, architecture diagrams, implementation documentation, runbooks, risk findings and executive-level recommendations.

• Strong communication skills, a service-oriented approach, personal initiative and the ability to work independently or as part of a multidisciplinary delivery team.

• Required Microsoft certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), together with either Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500).

• A relevant degree or equivalent professional experience.

Nice to Have's:

• Experience delivering Microsoft security solutions in enterprise or regulated environments and applying frameworks such as ISO 27001, NIST, CIS, GDPR, NIS2 or DORA.

• Desirable Microsoft certifications: Microsoft Certified: Information Security Administrator Associate (SC-401), Microsoft Certified: Azure Administrator Associate (AZ-104) and Microsoft Certified: Cybersecurity Architect Expert (SC-100). Progress towards, or completion of GitHub Copilot (GH-300), Develop AI Apps and Agents on Azure (AI-103) and Agentic AI Business Solutions Architect (AB-100).

• Experience with Azure landing zones, Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel integration, identity governance, privileged access or data security.

• CISSP, CCSP or CISM certification, or equivalent practical experience.

• Experience supporting pre-sales, developing statements of work or creating reusable consulting and delivery assets.