Principal Consultant - Azure, IAM & Endpoint Solutions - remote job

CrucialLogics is hiring a Principal Consultant - Azure, IAM & Endpoint Solutions - a lead role, which means responsibility for a team or a direction. The role sits in IT and programming and is fully remote. The company places no restriction on where the candidate lives, so you can apply from anywhere.

The employer did not publish a figure; that is settled at interview. The advert names the EST timezone, so working hours have to be agreed against your own.

This vacancy passed an automated check: the list excludes any advert requiring a foreign work permit, visa sponsorship, a particular citizenship, or residence in a specific country.

About CrucialLogics Inc. We harness the power of native Microsoft technologies you already possess to safeguard your business. Our approach to security is rooted in our Consulting with a Conscience philosophy.

- Security should be straightforward, manageable, and adaptable. - Security doesn't necessitate a hefty investment in fragmented solutions. - Adequate security can be attained by optimizing the configurations of the technologies you’re already utilizing. - Minimize your attack surface by streamlining your infrastructure.

You can’t prevent all malicious attempts, but securing your defenses to detect threats before they breach your systems is our priority. Principal Consultant - Azure, IAM & Endpoint Solutions Remote, Global Locations Welcomed (North American Business Hours Required) Job Overview: As a Principal Consultant, you'll spearhead the design, deployment, and optimization of Microsoft security and endpoint management solutions, with a deep focus on Microsoft Active Directory (on-premise/Entra ID), Microsoft Defender XDR, Microsoft Intune, and Azure Infrastructure. This role combines advanced technical expertise, advisory leadership, and presales engagement to deliver robust, scalable, and modern security operations for enterprise clients. Key Responsibilities: Presales & Client Interaction

- Assist presales activities through client architecture workshops, solution presentations, scoping discussions, and proposal creation. - Convert client requirements into modern security architectures that yield tangible results. - Ensure the technical quality of project execution in tandem with the Project Manager, and actively support Senior and Associate Consultants during the solution development and deployment phases. Security Architecture & Solution Design

- Design comprehensive security solutions using Microsoft IAM, Azure, Microsoft Defender, and Microsoft Intune to meet enterprise security and compliance standards. - Manage complex security transformation projects from design to deployment, ensuring high-quality outcomes and seamless operational readiness. Microsoft IAM (Active Directory/Entra ID)

- Develop identity-centric security controls across Entra ID, Conditional Access, MFA, and identity governance. - Align endpoint compliance, risk assessments, and real-time signals with Conditional Access policies. Microsoft Defender XDR

- Implement and fine-tune Microsoft Defender for Endpoint, Identity, Cloud Apps, and Office 365. - Configure EDR, threat analytics, attack surface reduction, advanced hunting, and automated remediation. - Offer expert advice on XDR strategy, identity protection, cloud app governance, and cross-domain correlation within Defender. Microsoft Intune (Endpoint Security & Management)

- Deploy, configure, and manage Intune for MDM/MAM across Windows, macOS, iOS, and Android. - Create compliance policies, device configuration profiles, app protection policies, and conditional access integrations. - Lead modernization efforts, including Autopilot, zero-touch provisioning, and cloud-based device governance. Azure Infrastructure

- Deploy and configure Microsoft Azure infrastructure, including Sentinel workspaces, data connectors, analytics rules, automation playbooks, and incident response workflows. Identity, Access & Conditional Access

- Mentor consultants and analysts in SOC, identity, and endpoint management fields. - Conduct training sessions for clients or internal teams on Sentinel, Defender, and Intune best practices. - Collaborate closely with current Security Service managers to enhance SOC processes, ensuring alignment with organizational objectives and the evolving threat landscape. - Facilitate the identification and implementation of process improvements to enhance detection, response, and reporting capabilities. Operational Excellence

- Diagnose and resolve issues with Sentinel data ingestion, Defender signal quality, and Intune device management. - Provide clear design documentation, runbooks, and operational handover materials. - Assist with lab environments, testing, and the lifecycle management of security configurations. Required Experience:

- Over 10 years of experience in IT security, SOC operations, endpoint management, or cloud security architecture. - Extensive hands-on experience with Microsoft IAM, Azure, Sentinel, Microsoft Defender XDR, and Microsoft Intune. - Strong understanding of infrastructure management, endpoint security, and identity-driven security models. - Proven ability to architect and lead large-scale security implementations. - Exceptional presales, communication, and client-facing skills. Desired Certifications

- AZ-500: Azure Security Engineer - MD-102 / MD-101: Endpoint Administrator - SC-200: Microsoft Security Operations Analyst - SC-300: Identity and Access Administrator - SC-400: Information Protection Administrator Desired Skills:

- Experience with MITRE ATT&CK mapping, threat modeling, and detection engineering. - Familiarity with Microsoft Purview for compliance and DLP. - Support for SOC teams and global enterprise security operations. - Leadership in multi-region rollouts and complex modernization projects. - KQL programming - ARM Templates - Bicep Work Conditions:

- This role requires working during North American business hours to align with customer schedules. We are a project-driven company and need to adhere to the working hours of our customers (EST). - Overtime may be required to meet project deadlines. - Participation in client workshops, presentations, and training sessions is expected. - Occasional travel may be necessary to meet clients or internal stakeholders.