Microsoft 365 Security Manager

About the role

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on 12/31/2026.

Responsibilities

• Lead projects and/or function as project lead architect with Microsoft technologies: Purview, Intune, Sentinel, Entra ID, Defender for Office, Defender for Endpoints and Servers, Defender for Vulnerabilities, Defender for Cloud Apps, Defender XDR and SCCM.
• Assist in business development activities such as defining scope of services, building resource estimates and related pricing, packaging proposals and supporting delivery of proposals to the client for M365 security services.
• Lead delivery of cloud security analysis, recommendations and configurations of prospective clients' Microsoft Entra ID, Office 365 (O365), Exchange Online, Teams, OneDrive for Business, M365 Copilot and SharePoint Online environments based on Deloitte's Microsoft 365 Cyber Risk Framework, leveraging Microsoft security solutions such as Entra, Purview, Defender, and Sentinel.
• Oversee day-to-day activities of both onsite and offshore engineers and architects.
• Function as primary client day-to-day interface building rapport and trust.
• Perform technical health checks for M365 platforms/environments prior to broader deployments.
• Assist clients with transitions to Microsoft 365 security services such as solution setup and service configuration, focused on risk mitigation.
• Provide technical support for M365 E5 security services and resolve service-related issues through research, troubleshooting and working with Microsoft.
• Implement industry leading practices around M365 E5 cyber risks and cloud security for clients.
• Design and develop cloud-specific security policies, standards and procedures e.g., O365 tenant management and configuration, identity management and access control, auditing and monitoring, security incident and event management, data protection (classification/labeling, DLP, encryption), user and administrator account management, SSO, conditional access controls and password/key management.
• Troubleshoot system level problems in a multi-vendor, multi-protocol network environment.
• Document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.
• Execute on M365 security engagements during different phases of the lifecycle - Discover, Assess, Design, Deploy/Test, Hypercare/Handover.
• Provide internal technical training to Advisory personnel as needed.
• Act as a subject matter expert on cloud cyber risk for Microsoft Purview, Microsoft Intune, Microsoft Defender, and Microsoft Sentinel capabilities.
• Manage Point-of-Views (PoVs) on providing leading practices to clients on M365 security challenges.
• Contribute to eminence activities, such as whitepapers pertaining to Microsoft 365 security capabilities.
• Support talent process in the manager role such as for recruiting and coaching.

Requirements

• Working experience in at least two of the areas listed below.
• 6+ years of experience in technical consulting, client problem solving, architecting and designing solutions in a consulting role with project leadership and/or architect experience.
• 6+ years of hands-on technical experience with Microsoft 365 enterprise-level messaging and collaboration services (Teams, OneDrive for Business, Exchange Online, Entra ID, SharePoint Online, O365 administration and setup) in implementation and operations