Note: The job is a remote job and is open to candidates in USA. eSentire is a cybersecurity company providing controlled-autonomy security operations and protecting organizations worldwide. The company is hiring a Microsoft Security Consultant to advise customers on Microsoft environments, assess security posture, provide actionable recommendations, and implement approved configuration changes. The role also supports customer escalations, Microsoft strategy, AI enablement, and collaboration across internal teams.
Responsibilities
- Serve as the primary Microsoft subject-matter expert for customers who purchase advisory/consulting hours, scoping engagements around their specific goals and environment
- Lead discovery sessions, architecture reviews, and technical workshops to understand a customer's current Microsoft configuration, licensing, and security controls
- Conduct Microsoft security health assessments across Microsoft 365, Entra ID, Defender (XDR, Endpoint, Identity, Cloud Apps), Sentinel, and Azure, benchmarking against Microsoft Secure Score, CIS benchmarks, and industry best practices — including eSentire's MDICA (Managed Detection and Response for Microsoft Defender for Identity and Cloud Apps) service line
- Conduct Microsoft E5/E7 license utilization reviews, identifying underused capabilities and informing expansion conversations with Sales
- Produce clear, prioritized findings reports and remediation roadmaps that translate technical risk into business impact for both technical and executive audiences
- Deliver tactical recommendations and, where approved by the customer, make direct configuration changes within their Microsoft tenant (e.g., conditional access, Defender for Identity policies, Defender for Cloud Apps policies, Sentinel analytics rules)
- Manage multiple concurrent customer engagements, tracking scope, hours, deliverables, and timelines with strong organizational discipline
- Maintain continuous, up-to-date fluency across Microsoft's security and cloud roadmap — including new features, licensing changes, deprecations, and emerging capabilities (e.g., Security Copilot and other AI-driven security tooling) — so you're always ready to advise on the latest Microsoft guidance
- Track Microsoft security advisories, Secure Score updates, and platform changes that could affect customer environments or eSentire's broader Microsoft strategy
- Act as an internal resource on Microsoft product direction, contributing to eSentire's point of view on Microsoft-related service offerings
- Provide rapid, hands-on Microsoft expertise during customer escalations that involve Microsoft technology, licensing, or platform behavior, partnering closely with the Security Operations Center (SOC) and Customer Success teams
- Support eSentire's broader Microsoft strategy discussions, acting as an internal advisor to Advisory Services leadership on Microsoft-related risk, opportunity, and positioning
- Move quickly and stay agile — reprioritizing across customer work and internal escalations as urgency requires
- Operate as a power user of AI tools — using them daily to speed up assessments, research, documentation, and customer deliverables
- Champion eSentire's AI-first mentality within Advisory Services, helping enable and upskill colleagues on incorporating AI into their own workflows
- Stay current on Microsoft's own AI capabilities (e.g., Security Copilot, Microsoft 365 Copilot) and bring relevant use cases back to customers and the internal practice
- Communicate effectively with a wide range of audiences — from hands-on IT administrators to CISOs and business executives — adjusting depth and language to the audience
- Document engagement outcomes, decisions, and configuration changes clearly for customer records and internal knowledge sharing
- Partner with Sales and Technical Account Managers to identify opportunities where additional advisory hours or services would benefit the customer
Skills
- 5+ years of hands-on experience administering, securing, or consulting on Microsoft 365, Azure, and/or Entra ID environments, ideally in a consulting, MSSP, or customer-facing capacity
- Working knowledge of Microsoft 365 E5/E7 licensing — what's included at each tier, common adoption gaps, and how to translate underused entitlements into a customer's security or business case
- Deep working knowledge of the Microsoft security stack — Microsoft Defender (XDR, Endpoint, Identity, Cloud Apps, Office), Microsoft Sentinel, and Entra ID capabilities such as Conditional Access, Identity Protection, and PIM — including strong fluency in Defender for Identity and Defender for Cloud Apps specifically
- Demonstrated experience conducting security assessments, gap analyses, or health checks and translating findings into prioritized, actionable remediation plans
- Experience making live configuration changes in customer or production Microsoft tenants under change-control/approval processes
- Strong verbal and written communication skills, with proven ability to present to both technical staff and executive/business stakeholders
- Excellent organizational skills — able to manage multiple client engagements, deadlines, and shifting priorities simultaneously
- Demonstrated agility and composure under pressure, including experience supporting live security incidents or escalations
- A genuine "power user" of AI tools (e.g., Claude, generative AI assistants) with a track record of using them to speed up your own work — plus enthusiasm for helping others adopt an AI-first way of working
- One or more current Microsoft certifications, such as: + SC-100: Microsoft Cybersecurity Architect Expert + SC-200: Microsoft Security Operations Analyst Associate + SC-300: Microsoft Identity and Access Administrator Associate + AZ-500: Microsoft Azure Security Engineer Associate + MS-102: Microsoft 365 Administrator
- Prior experience in a managed security services (MSSP), managed IT services (MSP), or Microsoft partner consulting environment
- Experience with Microsoft Copilot for Security or other emerging AI-driven security capabilities
- Familiarity with compliance frameworks relevant to customer environments (e.g., NIST, CIS Controls, ISO 27001, CMMC)
- Background supporting security operations center (SOC) escalations or incident response engagements
- Experience in a billable, hours-based consulting model, including scoping and tracking engagement time
Benefits
- We reward strong performance through role-specific incentive programs, including either an annual bonus program or a competitive commission plan
- Competitive benefit program
- Paid parental leave
- Matching RRSP or 401K program
- Competitive employee referral bonus
Company Overview