Microsoft Security Consultant

Ekco; Ireland; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible, family friendly working opt

Your progression and development isenc

Job summary

Ekco is seeking an experienced Microsoft Security Consultant to help enterprise and regulated clients assess, design and implement secure Microsoft cloud solutions. You will lead security workshops and provide guidance from pre-sales through delivery, translating requirements into practical designs and measurable improvements.

This remote-based role prefers candidates based in Ireland, with occasional travel to client sites.

Qualifications

• At least four years’ practical information security experience, with delivery across Microsoft 365, Azure or hybrid environments.
• Strong consulting and stakeholder-management skills, including discovery, envisioning and design workshops.
• Experience with Infrastructure as Code using Bicep and/or Terraform and governance practices.
• Microsoft certifications: Identity and Access Administrator Associate (SC-300) and Azure Security Engineer (AZ-500) or Cloud and AI Security Engineer (SC-500).
• Hands-on experience with Microsoft Defender, Sentinel, Entra and Purview in enterprise settings.
• Experience aligning security designs with ISO 27001, GDPR, NIS2 or DORA frameworks.

Responsibilities

• Lead client discovery and security envisioning workshops to align objectives with risk posture and roadmaps.
• Assess, design, implement and optimize Microsoft security solutions across 365, Azure and hybrid environments.
• Translate security requirements into practical architectures, standards and implementation plans.
• Configure and integrate security controls across identity, endpoints, email, collaboration and data protection.
• Produce clear technical designs, runbooks and handover artefacts for operational readiness.

Skills

Identity & access management

Endpoint security

Email security

Collaboration security

Cloud security

Data protection

Security operations

Zero Trust

Education

Bachelor's degree or equivalent

Tools

Bicep

Terraform

Job description

• We are looking for an experienced Microsoft Security Consultant to help enterprise and regulated clients assess, design and implement secure Microsoft cloud solutions. You will work across Microsoft 365, Azure and hybrid environments, translating business objectives and security requirements into practical designs, implementation plans and measurable improvements
• As a trusted consultant, you will lead discovery and security envisioning workshops, provide technical guidance from pre-sales through delivery and handover, and communicate recommendations clearly to technical and executive stakeholders
• This is a remote-based role, with a preference for applicants based in Ireland, particularly Dublin. Occasional travel to client sites may be required
• Consultancy and security envisioning: Lead client discovery, consultancy-led security envisioning and design workshops to establish business objectives, current-state risks, target outcomes and prioritised security roadmaps
• Microsoft security delivery: Assess, design, implement and optimise security solutions across Microsoft 365, Azure and hybrid environments, including Microsoft Defender, Microsoft Sentinel, Microsoft Entra and Microsoft Purview capabilities
• Secure cloud architecture: Translate security, technical and regulatory requirements into practical architectures, configuration standards and implementation plans aligned with Zero Trust principles and Microsoft guidance
• Infrastructure as Code: Contribute to repeatable, governed cloud deployments using Infrastructure as Code, with practical application of Bicep and/or Terraform, source control and deployment pipelines
• Security assessment and assurance: Conduct security reviews, posture assessments, gap analyses and design assurance activities; document risks and produce prioritised remediation recommendations
• Implementation and integration: Configure and integrate Microsoft security controls across identity, endpoints, email, collaboration, cloud workloads, data protection and security operations
• Operational readiness: Produce clear technical designs, configuration records, runbooks and handover artefacts, and help clients operationalise and sustain implemented controls
• Stakeholder engagement: Communicate architecture decisions, delivery progress, risks and recommendations to engineers, security teams, business leaders and executive stakeholders
• Pre-sales and practice development: Support solution shaping, estimates and statements of work, and contribute to reusable delivery methods, architecture patterns and service assets
• Technical leadership: Act as a subject-matter expert, mentor colleagues and remain current with Microsoft security capabilities, emerging threats and industry good practice

Benefits

• Flexible, family friendly working options
• Your progression and development is encouraged

Strong understanding of identity, endpoint, email, collaboration, cloud workload, data protection and security operations controls, including Zero Trust principlesAt least four years’ practical experience in information security, including substantial delivery experience across Microsoft 365, Azure or hybrid Microsoft environmentsProven consulting and stakeholder-management skills, including leading discovery, consultancy-led security envisioning and technical design workshopsStrong communication skills, a service-oriented approach, personal initiative and the ability to work independently or as part of a multidisciplinary delivery teamAbility to produce clear technical designs, architecture diagrams, implementation documentation, runbooks, risk findings and executive-level recommendationsA relevant degree or equivalent professional experiencePractical experience with Infrastructure as Code using Bicep and/or Terraform, together with an understanding of source control, CI/CD pipelines and governed deployment practicesRequired Microsoft certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), together with either Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)Hands-on experience with Microsoft security technologies such as Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Microsoft PurviewExperience assessing client environments and translating business, risk and regulatory requirements into security designs, implementation plans and remediation roadmapsExperience supporting pre-sales, developing statements of work or creating reusable consulting and delivery assetsCISSP, CCSP or CISM certification, or equivalent practical experienceExperience with Azure landing zones, Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel integration, identity governance, privileged access or data securityDesirable Microsoft certifications: Microsoft Certified: Information Security Administrator Associate (SC-401), Microsoft Certified: Azure Administrator Associate (AZ-104) and Microsoft Certified: Cybersecurity Architect Expert (SC-100). Progress towards, or completion of GitHub Copilot (GH-300), Develop AI Apps and Agents on Azure (AI-103) and Agentic AI Business Solutions Architect (AB-100)Experience delivering Microsoft security solutions in enterprise or regulated environments and applying frameworks such as ISO 27001, NIST, CIS, GDPR, NIS2 or DORA