Microsoft Consultant

eSentire, Inc.; Northern (KY); Hybrid; USD 105,000 - 125,000; Full time

Benefits offered by this job

Annual bonus

Commission plan

Competitive benefits

Paid parental leave

RRSP/401K match

Referral bonus

Job summary

eSentire is seeking a Microsoft Security Consultant to join Advisory Services within Customer Success. You will act as the go-to Microsoft expert, assessing environments, delivering actionable guidance, and, with client approval, implementing configuration changes directly in the Microsoft tenant.

You will work across Microsoft 365, Entra ID, Defender, Sentinel, and Azure, translating findings for IT practitioners and executives.

Qualifications

• 5+ years in Microsoft 365/Azure/Entra ID security
• Experience translating findings into business impact
• Experience making live configuration changes in Microsoft tenants

Responsibilities

• Serve as primary Microsoft subject-matter expert for advisory engagements
• Lead discovery sessions, architecture reviews, and workshops
• Conduct Microsoft security health assessments across the MS stack
• Produce prioritized findings reports and remediation roadmaps
• Deliver actionable recommendations and implement approved changes
• Manage multiple concurrent engagements with timelines and scope

Skills

Microsoft security stack

Microsoft 365/Azure/Entra ID

Defender (XDR/Identity/Cloud Apps)

Security health assessments

Executive stakeholder communication

Education

Microsoft Certifications (SC-100, SC-200, SC-300, AZ-500, MS-102)

Tools

Microsoft 365

Entra ID

Defender

Sentinel

Job description

Job Title: Microsoft Consultant

About eSentire

eSentire is a leader in Controlled Autonomy SecOps, protecting 2,000+ organizations across 35+ industries around the world. Founded in 2001, the company’s Controlled Autonomy SecOps operating model pairs agentic AI operatives with engineered human-judgment controls, delivering expert-depth security outcomes at machine speed without ceding accountability to opaque automation. Powered by the unified agentic AI Atlas Platform, eSentire’s Atlas AI + 24/7 expert human SOC coverage delivers offensive capabilities that preempt exposures before attackers do, detect, and respond to stop threats in real time.

We protect the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries—andwe'relooking for forward-thinking talent to help us define what AI-first security, human-backed trust means for the industry.

About the Role:

eSentire is hiring a Microsoft Security Consultant to join our Advisory Services practice within the Customer Success organization. This role is the go-to Microsoft subject-matter expert that customers engage on a consulting-hours basis to understand their Microsoft environment, assess their security posture, and get clear, actionable guidance — with the option to implement approved configuration changes directly.

You will operate as a trusted advisor across the full Microsoft security and productivity stack (Microsoft 365, Entra ID, Defender (for Identity, for Cloud Apps), Sentinel, and Azure), translating complex technical findings into recommendations that resonate with both IT practitioners and executive stakeholders. Because customers are paying for your time and expertise on demand, you'll need to stay continuously current on Microsoft's fast-moving product and security roadmap, work efficiently across multiple concurrent engagements, and move quickly when eSentire needs Microsoft expertise during an active escalation.

Responsibilities:

Customer Advisory & Delivery

• Serve as the primary Microsoft subject-matter expert for customers who purchase advisory/consulting hours, scoping engagements around their specific goals and environment.
• Lead discovery sessions, architecture reviews, and technical workshops to understand a customer's current Microsoft configuration, licensing, and security controls.
• Conduct Microsoft security health assessments across Microsoft 365, Entra ID, Defender (XDR, Endpoint, Identity, Cloud Apps), Sentinel, and Azure, benchmarking against Microsoft Secure Score, CIS benchmarks, and industry best practices — including eSentire's MDICA (Managed Detection and Response for Microsoft Defender for Identity and Cloud Apps) service line.
• Conduct Microsoft E5/E7 license utilization reviews, identifying underused capabilities and informing expansion conversations with Sales
• Produce clear, prioritized findings reports and remediation roadmaps that translate technical risk into business impact for both technical and executive audiences.
• Deliver tactical recommendations and, where approved by the customer, make direct configuration changes within their Microsoft tenant (e.g., conditional access, Defender for Identity policies, Defender for Cloud Apps policies, Sentinel analytics rules).
• Manage multiple concurrent customer engagements, tracking scope, hours, deliverables, and timelines with strong organizational discipline.

Microsoft Ecosystem Expertise

• Maintain continuous, up-to-date fluency across Microsoft's security and cloud roadmap — including new features, licensing changes, deprecations, and emerging capabilities (e.g., Security Copilot and other AI-driven security tooling) — so you're always ready to advise on the latest Microsoft guidance.
• Track Microsoft security advisories, Secure Score updates, and platform changes that could affect customer environments or eSentire's broader Microsoft strategy.
• Act as an internal resource on Microsoft product direction, contributing to eSentire's point of view on Microsoft-related service offerings.

Escalation & Internal Support

• Provide rapid, hands-on Microsoft expertise during customer escalations that involve Microsoft technology, licensing, or platform behavior, partnering closely with the Security Operations Center (SOC) and Customer Success teams.
• Support eSentire's broader Microsoft strategy discussions, acting as an internal advisor to Advisory Services leadership on Microsoft-related risk, opportunity, and positioning.
• Move quickly and stay agile — reprioritizing across customer work and internal escalations as urgency requires.

AI Enablement

• Operate as a power user of AI tools — using them daily to speed up assessments, research, documentation, and customer deliverables.
• Champion eSentire's AI-first mentality within Advisory Services, helping enable and upskill colleagues on incorporating AI into their own workflows.
• Stay current on Microsoft's own AI capabilities (e.g., Security Copilot, Microsoft 365 Copilot) and bring relevant use cases back to customers and the internal practice.

Communication & Collaboration

• Communicate effectively with a wide range of audiences — from hands‑on IT administrators to CISOs and business executives — adjusting depth and language to the audience.
• Document engagement outcomes, decisions, and configuration changes clearly for customer records and internal knowledge sharing.
• Partner with Sales and Technical Account Managers to identify opportunities where additional advisory hours or services would benefit the customer

Required Qualifications:

• 5+ years of hands‑on experience administering, securing, or consulting on Microsoft 365, Azure, and/or Entra ID environments, ideally in a consulting, MSSP, or customer-facing capacity.
• Working knowledge of Microsoft 365 E5/E7 licensing — what's included at each tier, common adoption gaps, and how to translate underused entitlements into a customer's security or business case.
• Deep working knowledge of the Microsoft security stack — Microsoft Defender (XDR, Endpoint, Identity, Cloud Apps, Office), Microsoft Sentinel, and Entra ID capabilities such as Conditional Access, Identity Protection, and PIM — including strong fluency in Defender for Identity and Defender for Cloud Apps specifically.
• Demonstrated experience conducting security assessments, gap analyses, or health checks and translating findings into prioritized, actionable remediation plans.
• Experience making live configuration changes in customer or production Microsoft tenants under change‑control/approval processes.
• Strong verbal and written communication skills, with proven ability to present to both technical staff and executive/business stakeholders.
• Excellent organizational skills — able to manage multiple client engagements, deadlines, and shifting priorities simultaneously.
• Demonstrated agility and composure under pressure, including experience supporting live security incidents or escalations.
• A genuine "power user" of AI tools (e.g., Claude, generative AI assistants) with a track record of using them to speed up your own work — plus enthusiasm for helping others adopt an AI‑first way of working.
• One or more current Microsoft certifications, such as:
  • SC-100: Microsoft Cybersecurity Architect Expert
  • SC-200: Microsoft Security Operations Analyst Associate
  • SC-300: Microsoft Identity and Access Administrator Associate
  • AZ-500: Microsoft Azure Security Engineer Associate
  • MS-102: Microsoft 365 Administrator

Preferred Qualifications

• Prior experience in a managed security services (MSSP), managed IT services (MSP), or Microsoft partner consulting environment.
• Experience with Microsoft Copilot for Security or other emerging AI-driven security capabilities.
• Familiarity with compliance frameworks relevant to customer environments (e.g., NIST, CIS Controls, ISO 27001, CMMC).
• Background supporting security operations center (SOC) escalations or incident response engagements.
• Experience in a billable, hours-based consulting model, including scoping and tracking engagement time.

What Success Looks Like

• Customers view you as their trusted go-to expert for anything Microsoft-related, driving repeat advisory engagements.
• Assessment findings and recommendations are consistently clear, prioritized, and actioned by customers.
• You remain a reliable, fast-response resource during Microsoft-related escalations, with minimal ramp-up time regardless of the specific technology involved.
• Your knowledge of the Microsoft roadmap keeps eSentire and its customers ahead of platform changes rather than reacting to them.

This posting is for an existing vacancy

Compensation Range

The expected base salary range for this role is $105,000 - $125,000 USD. This range is for the primary location for which the job is posted. Actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge, skills, andinternal equity.

Our Culture and Values

We celebrate diversity, operating with mutual respect and consideration, in an environment that fosters inclusivity for all. We believe that a variety of perspectives, backgrounds, and experiences make us stronger – if you’re enthusiastic about this opportunity but don’t meet every qualification, we encourage you to apply anyway. It takes a diverse set of thoughts, cultures, backgrounds, and perspectives to be a true market leader.

Total Rewards

We believe in rewarding performance and providing comprehensive benefits tailored to support your well-being. Our package includes:

• We reward strong performance through role‑specific incentive programs, including either an annual bonus program or a competitive commission plan
• Competitive benefit program
• Paid parental leave
• Matching RRSP or 401K program
• Competitive employee referral bonus

Artificial Intelligence (AI) Notice:

As part of our recruitment process, eSentire may use Artificial Intelligence (AI) tools to assist recruiters with reviewing and summarizing application materials. All candidate evaluations and hiring decisions are made by members of our hiring team

Accommodation

If you have any accessibility requirements during the recruitment process, please reach out to our HR team at [e-mail] and any accommodation needs will be addressed upon request.Your talents and unique perspectives are valued, and we look forward to the opportunity to work together to build a more inclusive future.

It's our mission at eSentire to protect our customers 24/7/365 and we extend this conviction to job seekers. During the application and interview process, eSentire will communicate with you from one of our corporate "@esentire.com" email addresses, never from a public email address.