Principal Consultant – Azure, IAM & Endpoint Solutions

About CrucialLogics Inc.

We secure your business using native Microsoft technologies you already own.

We apply our Consulting with a Conscience TM approach in our security philosophy.

Security should be simple, easy to manage and scalable

Security does not require a large investment in various point solutions

Security is easily achieved by properly configuring technologies you already are paying for

Reduce your attack footprint by reducing overall infrastructure

You will never stop bad actors from targeting you. The goal in security is to put defences in place to detect the attempt before the breach.

Principal Consultant- Azure, IAM & Endpoint Solutions

Remote, Global locations welcome (North American business hours required)

Job Summary

The Principal Consultant will lead the architecture, deployment, and optimization of Microsoft security and endpoint management solutions, with deep specialization in Microsoft Active Directory on-premise/Entra ID , Microsoft Defender XDR , Microsoft Intune, and Azure Infrastructure . This role blends advanced technicalexpertise, advisory leadership, and presales engagement to deliver secure, scalable, and modern security operations for enterprise clients.

Key Responsibilities

Presales & Client Engagement

Support presales through clientarchitectureworkshops, solution demonstrations, scoping sessions, and proposal development.

Translate business requirements into modern security architectures that drive measurable outcomes.

Overseethetechnicalquality of project delivery in collaboration with the Project Manager and actively supportSenior and Associate Consultantsthroughoutthe solutionBuildandimplementation.

Security Architecture & Solution Design

Architect end-to-end security solutionsleveraging Microsoft IAM, Azure , Microsoft Defender , and Microsoft Intune to meet enterprise security and compliance requirements.

Lead complex security transformation projects from design through implementation, ensuringhigh qualityoutcomes and smooth operational readiness.

Microsoft IAM (Active Directory/Entra ID)

Design identity-centric security controls across Entra ID, Conditional Access, MFA, and identity governance.

Align endpoint compliance, risk detections, andreal-timesignals with Conditional Access policies.

Microsoft Defender XDR

Implement and tune Microsoft Defender for Endpoint, Identity, Cloud Apps, and Office 365.

Configure EDR, threat analytics, attack surface reduction, advanced hunting, and automated remediation.

Provideexpert guidance on XDR strategy, identity protection, cloud app governance, andcross-domaincorrelation in Defender.

Microsoft Intune (Endpoint Security & Management)

Deploy, configure, and manage Intune for MDM/MAM across Windows, macOS, iOS, and Android.

Build compliance policies, device configuration profiles, app protection policies, and conditional access integrations.

Lead modernization initiatives including Autopilot,zero touchprovisioning, andcloud baseddevice governance.

Azure Infrastructure

Deploy and configure MicrosoftAzureinfrastruture, includingSentinel(SIEM, SOC)workspaces, data connectors, analytics rules, automation playbooks, and incident response workflows.

Identity, Access & Conditional Access

Leadership & Mentorship

Mentor consultants and analysts across SOC, identity, and endpoint management domains.

Provide training sessions to clients or internal teams on Sentinel, Defender, and Intune best practices.

Collaborate closely with current Security Service managers to refine SOC processes, ensuring alignment with organizationalobjectivesand evolving threat landscapes.

Facilitate the identification and implementation of process improvements to enhance detection, response, and reporting capabilities.

Operational Excellence

Troubleshoot Sentinel ingestion issues, Defender signal quality gaps, and Intune device management challenges.

Deliver clear design documentation, runbooks, and operational handover materials.

Assistwith lab environments, testing, and lifecycle management of security configurations.

Required Qualifications

1 0+ years of experience in IT security, SOC operations, endpoint management, or cloud security architecture.

Deephands-onexpertisewith Microsoft IAM, Azure, Sentinel, Microsoft Defender XDR, and Microsoft Intune .

Strongunderstandinginfrasturemanagement andendpoint security, and identity-driven security models.

Provenability to architect and lead large-scale security implementations.

Excellentpresales, communication, and client-facing skills.

Preferred Certifications

AZ-500: Azure Security Engineer

MD-102 / MD-101: Endpoint Administrator

SC-200: Microsoft Security Operations Analyst

SC-300: Identity and Access Administrator

SC-400: Information Protection Administrator

Preferred Skills

Experience with MITRE ATT&CK mapping, threat modeling, and detection engineering.

Familiarity with Microsoft Purview for compliance and DLP (nice-to-have).

Experience supporting SOC teams and global enterprise security operations.

Ability to lead multi-region rollouts and complex modernization projects.

KQL programming

ARM Templates

Bicep

Work Conditions

This job requires working North American business hours with customers and colleagues. We’reaproject driven company, andweneed to followthe workinghours ofourCustomers(EST)

Overtime may berequiredto meet project deadlines.

Participation in client workshops, presentations, and training sessions is expected.

Occasional travel may berequiredto meet clients or internal stakeholders.

Originally posted on Himalayas