M365 Security Consultant

M365 Security Consultant (Outside IR35)

Day Rate: £550 p/d Contract Length: 3–6 months (initial 3-month engagement with possible extension)Location: Remote – MUST be based in the UK Engagement: Outside IR35 Start: ASAP

We are seeking a highly capable, delivery-focused M365 Security Consultant to execute a series of time-boxed security improvement phases across device management, identity, access, and multiple site security.

This role is not advisory or architectural only—the contractor must deliver hands-on implementation of security controls aligned to:

• CIS Critical Security Controls v8 – IG2
• CIS Benchmarks
• NIST Cybersecurity Framework – Tier 3 (Repeatable)

Key Responsibilities

Mobile Device Management (MDM)

• Design MDM setup for corporate and BYOD devices.
• Define required MDM/MAM/Conditional Access configuration aligned to CIS IG2.
• Implement and enforce:
  • Corporate and BYOD MDM policies
  • Separate compliance & Conditional Access policies
  • MAM controls and approved application enforcement
• Deploy applications via Company Portal.
• Document configuration, exceptions, and operational guidance.
• Ensure security and compliance visibility/reporting is operational.

Identity, SSO & MFA

• Assess current identity and authentication controls.
• Define scope and implementation plan for SSO and MFA.
• Implement SSO/MFA policies and Conditional Access configurations.
• Enforce authentication policies with evidence of operation.
• Deliver operational documentation and testing evidence.

Device Hardening &  “Bricks & Morter” Security

• Define device hardening baselines aligned to CIS Benchmarks.
• Implement and enforce the hardening baseline using technical controls.
• Conduct multiple site location security and architecture review.
• Deliver and implement actionable security remediation.
• Evidence compliance and enforcement.

Required Experience

Technical Expertise

• Proven hands-on experience implementing Intune/Endpoint Manager for Corporate + BYOD environments.
• Strong capability implementing MAM, Conditional Access, App Protection Policies, and Zero Trust aligned controls.
• Solid experience with Azure AD / Entra ID, MFA, SSO, and identity governance.
• Practical delivery of security hardening aligned to CIS Benchmarks.
• Experience working with retail or distributed site/store environments (desirable).

Security Framework Knowledge

• Deep understanding of:
  • CIS Controls v8 (IG2)
  • CIS Benchmarks
  • NIST CSF (Tier 3 maturity)

Delivery Profile

• Must be a hands-on implementer (not advisory or consultancy only).
• Able to work in fast-paced, time-boxed delivery cycles.
• Comfortable with weekly milestone reporting and governance.
• Capable of documenting exceptions, justifications, and compensating controls.

Key Deliverables

• MDM current-state assessment and CIS-aligned configuration design.
• Implemented MDM, MAM, and Conditional Access policies in production.
• Fully implemented and enforced MFA and SSO.
• Auth, device, and application compliance reporting.
• Enforced CIS-aligned device hardening baseline.
• Implemented store security improvements.
• Complete technical documentation, evidence of implementation, and handover materials.
• Documented control exceptions with technical justification.