Active Directory & M365 Security Consultant

Consult; United Kingdom; Remote; GBP 111,000 - 166,000; Full time

Job summary

Sekuro is seeking an experienced Active Directory and Microsoft 365 security consultant for a four-week day-rate contract, with remote delivery. The role is hands-on advisory and implementation, focusing on hardening and optimizing enterprise AD and M365 environments.

You will run design workshops, refine Group Policy, redesign forest/domain/OU structures, and lead Privileged Access Management and Conditional Access design via Microsoft Entra ID, plus Azure AD Connect for hybrid identity.

Qualifications

• Strong experience with AD architecture, Microsoft Entra ID, Conditional Access, and PAM frameworks.
• Ability to design and implement PAM strategies and Entra ID policies.
• Experience with Hybrid identity and Azure AD Connect deployments.

Responsibilities

• Lead design workshops and advisory sessions for AD and M365 security.
• Review and refine Group Policy configurations and AD structures (forest/domain/OU).
• Drive security hardening activities including PAM and Conditional Access design via Microsoft Entra ID.
• Oversee auditing, monitoring frameworks and disaster recovery planning.
• Perform Microsoft Secure Score baseline assessments and remediation planning.

Skills

AD architecture

Microsoft Entra ID

Conditional Access

Privileged Access Management

Hybrid identity

Windows server AD

Tools

Azure AD Connect

WAF

Job description

Sekuro is seeking an experienced Active Directory and Microsoft 365 security consultant for a 1 month day rate contract engagement with a major client. The work can be undertaken remotely.

This is a hands-on advisory and implementation role focused on hardening and optimising enterprise AD and M365 environments.

The successful candidate will facilitate design workshops, review and refine Group Policy configurations, and support the redesign of forest, domain, and OU structures. They will also lead security hardening activities including Privileged Access Management strategy, Conditional Access policy design via Microsoft Entra ID, and Azure AD Connect deployment for hybrid identity. Technical skills around WAF is highly regarded.

Further responsibilities include establishing auditing and monitoring frameworks, supporting disaster recovery planning, and conducting a Microsoft Secure Score baseline assessment with associated impact analysis and remediation.

We are looking for someone who can work independently, communicate clearly with technical and business stakeholders, and deliver pragmatic outcomes within a tight timeframe. Strong experience with AD architecture, Microsoft Entra ID, Conditional Access, and PAM frameworks is essential, along with the ability to assess and manage risk where documentation is limited.

This is an initial term of four weeks and potential for extension based on project needs. Candidates should be available to commence in October and comfortable working within a collaborative, values-driven consulting team.