Microsoft Security Engineer (Outside IR35)

A leading financial services organisation is seeking an experienced Microsoft Security Engineer to join a high-profile cybersecurity programme. This role will focus on the design, implementation, integration, and optimisation of security solutions across the Microsoft security ecosystem. The successful consultant will have a proven track record of engineering enterprise-grade security solutions using Microsoft technologies and will be comfortable working across identity, endpoint, cloud, data, and security operations domains. This is a hands-on engineering role rather than a pure operational or analyst position.

Key Responsibilities

• Design, implement, and optimise security controls across the Microsoft security stack.
• Engineer solutions leveraging Microsoft Defender, Microsoft Sentinel, Entra ID, and Azure security services.
• Lead the deployment and integration of security technologies across cloud and hybrid environments.
• Configure and enhance security monitoring, threat detection, and response capabilities.
• Implement identity and access management controls, including Conditional Access and Privileged Identity Management (PIM).
• Improve endpoint security posture through Microsoft Defender for Endpoint.
• Work closely with infrastructure, cloud, networking, and security teams to deliver security enhancements.
• Develop automation and operational efficiencies using PowerShell, Logic Apps, and other Microsoft-native technologies.
• Produce technical documentation, implementation plans, and engineering standards.

Required Experience

• Proven experience engineering security solutions using Microsoft security technologies.
• Strong knowledge of Microsoft Defender XDR, including:
  • Defender for Endpoint
  • Defender for Identity
  • Defender for Office 365
  • Defender for Cloud Apps
  • Defender for Cloud
• Experience implementing and managing Microsoft Sentinel.
• Strong understanding of Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and Privileged Identity Management.
• Experience securing Azure environments and implementing cloud security controls.
• Strong troubleshooting and integration skills across complex enterprise environments.
• Experience automating administrative and security processes using PowerShell.

Desirable Skills

• Experience within Financial Services, Professional Services, or other highly regulated environments.
• Infrastructure-as-Code experience using Terraform or Bicep.
• Knowledge of Zero Trust security principles.
• Experience with Microsoft Purview and Data Loss Prevention technologies.
• Microsoft certifications such as SC-100, SC-200, SC-300, AZ-500, or equivalent.