Role Purpose
Leading and delivering Microsoft cloud solutions end-to-end across identity, endpoint, security, and Modern Work workloads. This role operates in customer-facing consulting environments — owning technical delivery from assessment through to handover — and is expected to produce structured, audit-ready deliverables while driving adoption and operational readiness for enterprise clients. The role also supports Microsoft Azure engagements on a project-dependent basis, where cloud infrastructure intersects with M365 workloads.
Key Responsibilities
1. Project Delivery (End-to-End)
- Lead and deliver Microsoft cloud projects across assessment, design, implementation, migration (project-dependent), and handover.
- Own project delivery quality: scope management, milestone execution, and customer sign-off.
- Ensure all deliverables are produced to standard and on schedule.
2. Technical Workshops & Customer Engagement
- Run technical workshops: discovery, requirements gathering, solution walkthroughs, and adoption readiness sessions.
- Manage stakeholder communication throughout the project lifecycle.
- Present technical trade-offs clearly to both technical and non-technical audiences.
3. Documentation & Deliverables
- High-Level Design (HLD): Solution architecture, component overview, integration dependencies, security posture, and design decisions with rationale.
- Low-Level Design (LLD): Detailed configuration specifications, policy definitions, step-by-step implementation sequences, rollback procedures, and environment-specific parameters.
- Runbooks: Operational procedures, escalation paths, and day-2 support guidance.
- Implementation Guides & Operational Handover Packs: Knowledge transfer checklists, admin onboarding, and steady-state operating procedures.
- Maintain structured, audit-ready project documentation across all engagements.
- Support SOP creation and knowledge transfer to customer IT teams.
4. Core Solution Delivery — Microsoft Entra (Identity & Access)
- Design and implement Conditional Access, MFA, and passwordless authentication.
- Configure Named Locations and access controls aligned to customer risk profiles.
- Deliver SSO integrations and application onboarding (SAML/OIDC).
5. Core Solution Delivery — Microsoft Intune (Endpoint Management)
- Deploy MAM/MDM policies, app deployment, compliance and configuration baselines.
- Implement Endpoint Security policies, device baselines, and operational reporting.
- Advise on co-management considerations where applicable.[BL1] [BL2] [RC3]
- Onboarding of Endpoints (Windows, Mobile Devices)
6. Project-Dependent / Supporting Workloads
- Support Microsoft 365 workload governance and hardening (Exchange Online, SharePoint, OneDrive, Teams).
- Plan and support tenant-to-tenant migrations (Exchange, SharePoint/OneDrive, Teams) and endpoint profile migration.
- Deliver Microsoft Defender for Endpoint onboarding, baseline hardening, and alert tuning.
- Implement Microsoft Purview solutions: Sensitivity Labels, DLP, Information Lifecycle Management, and Insider Risk where applicable.
- Conduct tenant security assessments across Secure Score, Conditional Access posture, and endpoint health.
- Microsoft Azure (project-dependent): RBAC, networking concepts, logging/monitoring integrations, identity integrations.
7. Troubleshooting & Post-Go-Live Support
- Troubleshoot complex identity and endpoint issues and deliver root-cause fixes (enrollment failures, access blocks, policy conflicts).
- Provide post-go-live hypercare support: stabilisation, tuning, knowledge transfer, and operational readiness confirmation.
Hard Skills Required
Must-Have
- Microsoft Entra ID — Conditional Access, MFA, SSO/SAML/OIDC; hands-on config and troubleshooting.
- Microsoft Intune — MDM/MAM, compliance policies, device configuration baselines, enrolment flows.
- Microsoft Purview — Sensitivity Labels, DLP, ILM, Insider Risk; hands-on implementation and post-deployment tuning.
- End-to-end M365 project delivery in a consulting, SI, MSP, or enterprise IT environment.
- Customer-facing delivery: workshops, stakeholder management, technical presentations.
- HLD/LLD authoring and structured technical documentation.
- PowerShell scripting for deployment, validation, and troubleshooting.
- Strong troubleshooting across identity/ device / policy interactions.
Behaviours We Hire For
Technical skill is necessary but not sufficient. We are looking for consultants who demonstrate:
- Ownership Mentality: Takes responsibility for outcomes, not just activities.
- Structured Problem-Solving: Diagnoses before acting; builds solutions that address root causes.
- Proactive Communication: Updates stakeholders unprompted; flags risks with mitigations.
- Intellectual Honesty: Says what needs to be said — to clients and internally.
- Delivery Focus: Finds ways forward rather than reasons to wait.
- Continuous Learning: Stays ahead of the platform; shares knowledge with the team.