M365 Security Presales Consultant
Description
This is a high-visibility, customer-facing role suited for someone who is equally comfortable presenting a Secure Score roadmap to a CISO and troubleshooting a Conditional Access policy in the tenant.
- Lead end-to-end presales engagements for Microsoft 365 Security and Compliance solutions, including responding to RFPs, preparing proposals, and crafting solution architectures.
- Conduct Microsoft Envisioning Workshops and Immersion Briefings to help customers articulate their security strategy and align it to the Microsoft Security platform.
- Deliver compelling technical presentations, live demonstrations, and proof-of-concept environments tailored to customer pain points.
- Engage directly with CISOs, IT Directors, and security architects to map business risk to Microsoft security controls across identity, endpoint, data, and cloud.
- Collaborate with the sales team to qualify opportunities, develop win themes, and support commercial discussions around Microsoft licensing and ECIF/co-sell funding.
- Lead and deliver implementation projects across the Microsoft 365 Security stack - Microsoft Defender suite (MDO, MDE, MDI, MDCA), Microsoft Entra ID (Conditional Access, PIM, Identity Protection), Microsoft Purview (DLP, sensitivity labels, insider risk), and Microsoft Sentinel.
- Design and deploy Microsoft Entra Internet Access (Global Secure Access) and Entra Private Access for ZTNA/SSE architectures.
- Implement Microsoft Intune-based endpoint compliance and device management policies integrated with Conditional Access.
- Configure Microsoft Cloud PKI, TLS inspection, and certificate lifecycle management within managed security deployments.
- Drive migration and consolidation engagements - including transitioning customers from third-party security tools (e.g., CrowdStrike, Symantec, Zscaler) to the Microsoft native security stack.
- Document solution architectures, runbooks, and configuration guides for handover to managed services teams.
- Contribute to Schnells M365 Security practice by building reusable assets - solution templates, assessment frameworks, workshop decks, and demo environments.
- Stay current with Microsoft Security product roadmap, Secure Future Initiative, and evolving threat landscape; translate updates into customer-facing insights.
- Mentor junior consultants and participate in internal knowledge-sharing sessions.
- Candidates must demonstrate hands-on experience across multiple pillars of Microsoft 365 Security:
- Identity & Access: Microsoft Entra ID, Conditional Access, PIM, Identity Protection, Entra Verified ID (Mandatory)
- Endpoint Security: Microsoft Defender for Endpoint (MDE), Intune, Attack Surface Reduction (Mandatory)
- Email & Collaboration: Microsoft Defender for Office 365 (MDO), Safe Links, Safe Attachments, anti-phishing (Mandatory)
- Cloud App Security: Microsoft Defender for Cloud Apps (MDCA), session policies, app governance
- Data Security & Compliance: Microsoft Purview - DLP, sensitivity labels, retention policies, insider risk, eDiscovery, Communication Compliance (Mandatory)
- Identity Threat Detection: Microsoft Defender for Identity (MDI), UEBA, lateral movement detection
- SIEM/SOAR: Microsoft Sentinel - workspace design, KQL-based detection rules, SOAR playbooks, Log Analytics (Good to Have)
- Network Security: Global Secure Access (Entra Internet Access / Entra Private Access), Microsoft Cloud PKI (Good to Have)
- Proven ability to lead technical discovery sessions and convert requirements into M365 security architecture proposals.
- Experience facilitating Microsoft Envisioning Workshops, Executive Briefings, and security posture assessments (Secure Score, MCSB).
- Comfort with TCO/ROI modeling and competitive differentiation against non-Microsoft security vendors.
- Familiarity with Microsoft partner programs - ECIF, Solution Partner benefits, co-sell motions, and Azure Consumption Commitments (MACC).
- 4+ years of hands-on delivery experience in M365 Security projects, not just advisory or scoping roles.
- Experience managing customer tenants, deploying policies in production environments, and handling post-deployment support.
- Ability to run concurrent engagements and coordinate with delivery teams across time zones.
- The following Microsoft certifications are strongly preferred. Candidates with 3 or more of these will be prioritized:
- The ideal candidate has:
- Delivered a Microsoft 365 E5 security implementation end-to-end - from scoping to go-live - for an enterprise customer.
- Run an Envisioning Workshop or Microsoft Immersion Briefing and converted it into a signed SOW.
- Designed a Zero Trust architecture using Microsoft Entra, Intune, Purview, and Sentinel as the core pillars.
- Replaced a third-party security tool (CASB, EDR, DLP, or SIEM) with Microsofts native stack.
- Holds SC-400 or SC-200 (or both) and can defend their implementation choices in a technical review.
- Competitive compensation with performance-linked incentives.
- Direct exposure to SME&C/Enterprise customers and Schnells senior leadership team.
- Access to Microsoft partner resources - MPN benefits, lab environments, and co-sell opportunities.
- Structured certification support - exam vouchers and dedicated prep time.
- A high-growth environment where you shape the practice, not just execute from a playbook.
This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.