Azure engineer, M365

Hello, We need Project-based assignments with potential ongoing work of a Microsoft Cloud Engineer as follows: Microsoft 365 Migration & Modernization: Plan and execute Microsoft 365 tenant migrations and consolidations (Exchange Online, SharePoint Online, OneDrive, Teams). Perform identity and access readiness tasks (Entra ID configuration support, basic tenant hardening, conditional access alignment where applicable). Support mailbox migrations, domain cutovers, DNS validation, mail flow, and post-migration remediation. Assist with Teams/SharePoint information architecture, permissions, and governance best practices. Produce migration runbooks, checklists, and post-cutover validation reports. Azure Engineering: Deploy and configure Azure resources aligned to security and operational best practices (networking concepts, RBAC, resource groups, policy basics). Implement and maintain monitoring/logging prerequisites for security tooling (Log Analytics workspaces, diagnostic settings, data connectors). Support secure access patterns and operational hygiene (least privilege, separation of duties, role design). Security Operations: Sentinel + Defender Configure and tune Microsoft Sentinel: Data connectors, analytics rules, incident workflows, automation (Logic Apps where appropriate). Alert triage processes, use-case mapping, and false-positive reduction. Workbook dashboards and operational reporting. Implement and manage Microsoft Defender suite components relevant to client environment: Defender for Endpoint onboarding and baseline tuning. Defender for Office 365 configuration (anti-phishing, safe links/attachments, mail policies). Compliance & Data Governance: Purview Implement and tune Microsoft Purview: Sensitivity labels, label policies, DLP policies (M365 workloads). Information Protection configurations aligned to business needs (data classification, retention considerations). Basic compliance reporting and audit support, where appropriate. Translate compliance objectives into implementable technical controls and documented configurations. Documentation & Project Delivery Maintain clean documentation: architecture notes, change logs, configurations, and “as-built” summaries. Provide clear status updates, risks, and dependencies in plain language. Participate in technical discovery sessions and propose scoped implementation plans. Required Qualifications: 3+ years of hands-on experience with Microsoft Azure and Microsoft 365 administration/engineering. Microsoft Sentinel Microsoft Defender (Endpoint and/or Office 365 strongly preferred) Microsoft Purview (Sensitivity labels, DLP, Information Protection) Experience executing or supporting M365 migrations (Exchange Online, SharePoint/OneDrive, Teams). Preferred Qualifications Microsoft Entra ID Conditional Access patterns Intune/MEM (device onboarding, compliance, baseline policies) PowerShell and/or Microsoft Graph automation for repetitive tasks background with multiple client environments. Comfortable working in a ticketed/project workflow with defined acceptance criteria. Security-first mindset (least privilege, auditability, documentation, rollback awareness). Deliverables (What “Good” Looks Like) Secure, validated configurations (with screenshots or exported config summaries when appropriate) Runbooks and implementation notes that another engineer can follow Reduced noise in Sentinel/Defender through tuning and documented logic Clear before/after status reporting and post-implementation checks Apply tot his job