Security Engineer Consultant – 60‑Day Contract

About the role

We are looking for a hands‑on Security Engineer to join our team for a 60‑day contract. Working under the IT Manager, you will configure, test, and document Microsoft 365 security controls and evaluate endpoint protection and SIEM solutions. This remote position requires independent execution with light oversight.

Key responsibilities

• Update Microsoft 365 security settings, enhance Conditional Access policies, and implement email encryption and data‑protection requirements.
• Configure and tune Defender for Office 365 anti‑phishing and Defender for Endpoint anti‑malware policies.
• Assess current backup coverage, implement Microsoft‑native backup for M365 data and endpoints, and conduct restore‑test procedures.
• Review existing M365 licensing, transition to Enterprise‑level plans, and define role‑based license mappings.
• Evaluate, select, and pilot endpoint protection and SIEM solutions.
• Build and test Intune security profiles, deploy endpoint protection agents, and document runbooks for handoff.

Required profile

• Proven experience designing, testing, and hardening Microsoft Conditional Access policies in a production tenant.
• Hands‑on work with Microsoft Entra ID for MFA and SSO configuration and rollout.
• Experience configuring Microsoft Purview for DLP, sensitivity labels, and PHI/PII classification.
• Strong background with Microsoft Defender (Endpoint and Office 365) for anti‑malware and anti‑phishing tuning.
• Practical evaluation and deployment of third‑party EDR/XDR solutions such as SentinelOne.
• Competence in Microsoft Intune policy authoring, compliance baselines, and software/agent deployment.
• Knowledge of M365 licensing tiers (Business Premium, E3, E5) and experience engaging Microsoft partners.

Required skills

• Microsoft Conditional Access
• Microsoft Entra ID (MFA/SSO)
• Microsoft Purview (DLP, sensitivity labels)
• Microsoft Defender for Endpoint
• Microsoft Defender for Office 365
• SentinelOne (or similar EDR/XDR)
• Microsoft Intune
• M365 licensing (Business Premium, E3, E5)