Senior Microsoft Security Consultant

This is a remote position.

Position Summary

We are seeking a Senior Microsoft Security Consultant to lead client projects including technical discovery sessions, and strategic architecture engagements focused on enterprise modernization and Zero Trust transformation. The consultant will facilitate cross-functional workshops, assess current-state identity architectures, define future-state designs, and develop multi-year roadmaps for large enterprise clients.

The ideal candidate combines deep expertise in Microsoft identity and security technologies with strong consulting, facilitation, and executive communication skills. This is an advisory role focused on architecture, strategy, and planning with oversight for hands on implementation.

Primary Responsibilities

• Lead executive discovery workshops focused on enterprise identity modernization and Zero Trust strategy.
  
• Facilitate technical and business stakeholder discussions across identity, security, cloud, compliance, and operations teams.
  
• Assess current-state Active Directory, Microsoft Entra ID, hybrid identity, and privileged access architectures.
  
• Gather business, security, compliance, and technical requirements to define future-state identity architectures.
  
• Conduct architecture reviews, maturity assessments, and gap analyses.
  
• Develop North Star identity strategies and multi-year implementation roadmaps.
  
• Design enterprise identity governance aligned with Zero Trust principles.
  
• Produce executive-ready presentations, discovery reports, architecture diagrams, and strategic recommendations.
  
• Advise clients on identity resiliency, privileged access, hybrid identity, disaster recovery, and cloud identity modernization.
  
• Align recommendations with Microsoft security capabilities while remaining vendor-neutral where appropriate.
  

Required Technical Skills

The consultant will lead client engagements across five strategic identity pillars:

Identity Modernization

• Hybrid Identity
  
• Active Directory Modernization
  
• Microsoft Entra ID
  
• Identity Governance
  
• Conditional Access
  
• Identity Lifecycle Management
  

Zero Trust Architecture

• Zero Standing Privilege (ZSP)
  
• Just-in-Time (JIT) Administration
  
• Just Enough Administration (JEA)
  
• Privileged Access Workstations (PAW)
  
• Tier 0 Protection
  
• Identity Threat Detection and Response (ITDR)
  

Hybrid & Cloud Identity

• Microsoft Entra ID
  
• Active Directory
  
• Pass-through Authentication
  
• Passwordless Authentication
  
• FIDO2
  
• Certificate-Based Authentication
  
• PKI
  
• Cloud Identity Architecture
  

Identity Resiliency

• Active Directory Recovery
  
• Microsoft Entra Tenant Recovery
  
• Disaster Recovery
  
• Identity Backup
  
• Break Glass Accounts
  
• Cyber Recovery
  

Emerging Identity Technologies

• Non-Human Identity (NHI)
  
• AI Agent Identity
  
• SPIFFE / SPIRE
  
• Secrets Management
  
• Workload Identity
  
• Machine Identity Governance
  

Required Experience

• 10+ years of cybersecurity and identity architecture experience.
  
• 7+ years working with Microsoft identity and security technologies.
  
• Experience designing enterprise Active Directory and Microsoft Entra ID architectures.
  
• Experience leading enterprise identity modernization initiatives.
  
• Experience facilitating executive workshops and architecture review sessions.
  
• Experience producing executive strategy documents, technical assessments, and implementation roadmaps.
  
• Experience working in highly regulated enterprise environments.
  

Responsibilities

• Lead stakeholder interviews.
  
• Conduct architecture assessments.
  
• Facilitate collaborative design workshops.
  
• Document business and technical requirements.
  
• Develop current-state and future-state architecture documentation.
  
• Produce gap analyses and risk assessments.
  
• Present recommendations to executive leadership.
  
• Support strategic planning and roadmap development.
  
• Build consensus across technical and business stakeholders.
  

Ideal Candidate Profile

The ideal candidate is a trusted advisor who blends deep Microsoft identity expertise with enterprise architecture and strategic consulting capabilities. They are comfortable leading executive workshops, facilitating technical discussions across diverse stakeholder groups, and developing actionable identity modernization roadmaps that align with Zero Trust principles. Success in this role requires balancing technical depth with business acumen to deliver practical, scalable, and resilient identity strategies for complex enterprise environments. This consultant should be equally effective engaging with C-level executives, security architects, and engineering teams while driving consensus and producing high-quality strategic deliverables.