You own the Microsoft estate for our clients end to end. Every E5 workload, every security control, and the AI layer sitting on top. You lead engagements, you carry the technical decision, and you are the person the client CIO calls. You also mentor the engineers under you on delivery.

Scope

Full E5. Not a slice of it.

- Identity. Entra ID, conditional access, PIM, entitlement management, access reviews, hybrid identity and cloud sync
- Endpoints. Intune across Windows, macOS, iOS and Android. Autopilot, compliance policies, app protection, Defender for Endpoint onboarding, Windows Update for Business
- Security. Defender XDR across Endpoint, Identity, Office 365 and Cloud Apps. Sentinel integration, incident response workflow, secure score remediation, attack surface reduction
- Data governance. Purview sensitivity labels, DLP, endpoint DLP, retention, insider risk, eDiscovery, DSPM for AI
- Collaboration. SharePoint Online architecture, hub and site design, permissions and oversharing remediation, migration. Teams voice, policy, governance and lifecycle. Exchange Online mail flow, hygiene, hybrid coexistence and migration
- AI. Copilot readiness assessment through production rollout. Copilot Studio and Azure AI Foundry agent build, agent governance, licensing strategy and adoption

What you do

- Run engagements. Scope, plan, staff, deliver, land the outcome




- Design the architecture and defend it in front of client IT leadership and boards
- Fix broken tenants that someone else built
- Write the assessments, roadmaps and runbooks we hand to clients
- Support pre sales. Sit in the room, size the work, write the technical response
- Coach the engineers on your engagements

Preferred

- Microsoft 365 Certified: Administrator Expert
- SC-100 Cybersecurity Architect Expert
- SC-500 Cloud and AI Security Engineer Associate
- AB-900 Copilot and Agent Administration Fundamentals
- AI-103 Azure AI App and Agent Developer Associate
- AZ-104 Azure Administrator Associate
- AZ-305 Azure Solutions Architect Expert

Retired credentials still count with us. SC-400, AI-102, AZ-500, MS-203, AZ-500. Tell us what you hold and we pay for the current exam. Microsoft has no current role based certification for SharePoint or Exchange. We test that depth in the interview.

Experience

Eight plus years in the Microsoft stack, including three leading engagements or teams. Consulting or MSP background. Multiple full E5 deployments and at least one Copilot rollout you took from readiness to live users. PowerShell and Graph daily. You can write a client facing document without someone rewriting it.

What you get

- Enterprise clients across finance, real estate, aviation, manufacturing and healthcare. Direct line to the CISO and the partners. No layers.

📌 Managing Consultant, Cloud Security and Ai (Canada)
🏢 CriticalMatrix
📍 Canada