Snr Cybersecurity Consultant Engineer (Architecture, Infrastructure and Remediation)

AboutLevelBlue 

LevelBlue is a leading cybersecurity and managed security services provider focused on threat detection and response. Leveraging our Fusion platform, global threat intelligence, and deepexpertise across offensive and defensive security disciplines, we helporganizations across financial services, retail, healthcare, government, and utilities manage risk and respond to the threats that matter most. 

Our Professional Services practice works alongside clients at every stage of their security maturity– from strategy and architecture through to hands-on delivery, operations uplift, and incident response. We are a team of practitioners who have built and run security programs ourselves, and we bring that credibility to every engagement. 

LevelBlue’s Professional ServicesOrganizationis hiring a Senior Cybersecurity Engineering Consultantto implement and upliftMicrosoft security for clients,especially Purview,and to take hands-oncontrol work.You will own scoped delivery: requirements, target configuration, guided or hands-on implementation, andclient-ready artifacts. You will run workshops, give SME-level guidance, and support recommendations with configuration evidence. You will work with autonomy and in mixed delivery and client teams, own your workstream, and improve practice proposals and delivery assets.This is not policy-only work ordefault-on exercise. You will have implemented Purview and adjacent Microsoft security controls in live tenants.

Role Expectations / Key Responsibilities

Engagement Deliver

• Lead Purview engagements: current-state assessment, target design, phased rollout, and configuration ofscopedcapabilities (information protection, DLP, audit, and related controls).

• Implement and harden Microsoft Defender XDR and Entra ID security (including Conditional Access and identity-protection patterns)for the client’s operating model, not a demo tenant. 

• Deliver Azure security posture assessments and guided hardening:landing-zone and control-plane hygiene, Defender for Cloud, prioritizedroadmap. 

• Where scoped, deliver assessment-level Active Directory / hybrid identity work: privilege, delegation, legacy protocol exposure, anda prioritized hardeningroadmap.  

• Produce client-ready artifacts:gap analyses, configuration baselines, implementation plans, and operational handover that can be executed. 

• Run workshops with security, compliance, identity, and IT stakeholders; capturerequirements,decisions, risks, andscope changes. 

• Support pre-sales with effort estimates, technical scope, and solution shaping. 

Experience & Qualifications 

Required 

• Senior consulting or professional-services delivery: workshops, scope, and artifacts the client accepted. 

• Hands-on Microsoft Purview implementation in a production or client tenant;you have designed and configured controls. 

• Hands-on Microsoft Defender XDR (at least Defender for Endpoint plus one of Identity, Office, or Cloud Apps). 

• Hands-on Entra ID security: Conditional Access, identity protection / risk patterns, and privileged-access basics as implemented in the tenant. 

• Ability to assess requirements and recommend a target configuration witha practical how-to, including what to phase and what not to turn on. 

Strongly Preferred 

• Active Directory security assessments in hybrid estates (privilege, stale admin paths, legacy auth,hardening roadmap). 

• Azure security assessments and control implementation, including Defender for Cloud. 

• Landing Purview, Defender, and Entra telemetry in Microsoft Sentinel (connectors, data usefulness,detections). 

Useful 

• AWS or multi-cloud posture reviews. 

• Network-edge reviews (firewall/VPN policy, logging, segmentation) on occasional engagements 

Certifications(desirable) 

• Most relevant: SC-400;SC-300;SC-200 

• Also useful: SC-500(AZ-500);SC-100; CISSP or CISM