Microsoft Consultant

Microsoft 365 & Endpoint Architect (Tenant Assessment & AI Readiness)

Job Title: Microsoft 365 & Endpoint Architect

Engagement Type: Contract / Fractional Engagement

Duration: 4–6 Weeks

Estimated Effort: 200–240 Hours Total (30–40 Hours/Week)

We are seeking an experienced Microsoft 365 & Endpoint Architect to lead a focused tenant assessment and AI readiness engagement. This consultant will evaluate the client’s Microsoft 365 environment, identify security and configuration risks, assess endpoint management maturity, and provide prioritized recommendations to support future modernization and AI initiatives.

This is an advisory‑focused engagement centered on assessment, risk identification, and strategic recommendations. The role does not involve implementation, remediation, or operational support.

• Evaluate Microsoft 365 configurations across SharePoint Online, Microsoft Teams, Exchange Online.
• Identify architectural gaps, configuration issues, and security risks.
• Assess collaboration governance, external sharing controls, and data access practices.
• Provide recommendations aligned with Microsoft best practices.

• Assess Entra  and identity management practices.
• Review Role‑Based Access Control (RBAC) administrative roles and privileged access.
• Review Conditional Access policies and MFA adoption and coverage.
• Identify identity‑related risks including orphaned accounts, excessive permissions, and service account exposure.

• Evaluate overall endpoint management strategy and Intune configuration.
• Assess device enrollment and management coverage.
• Assess compliance policies and enforcement.
• Assess patch management processes.
• Assess Windows Autopilot deployment practice.
• Identify risks associated with unmanaged or non‑compliant devices.

• Evaluate organizational readiness for Microsoft Copilot and AI adoption.
• Review SharePoint and One Drive permission structure.
• Review data governance practice.
• Review content access pattern.
• Assess oversharing and data exposure risk.
• Provide recommendations to improve AI readiness and secure data access.

• Document assessment findings and risk areas.
• Develop clear risk statements.
• Assess impact.
• Prioritized recommendations.
• Contribute to a remediation roadmap categorized by High, Medium, and Low priority initiatives.

• Partner with the Engagement Manager and client stakeholders to translate technical findings into business impact.
• Support roadmap development.
• Contribute to executive‑level presentations and deliverables.

• Microsoft 365 configuration review.
• Security and governance assessment.
• Identity and endpoint evaluation.
• Risk identification and prioritization.
• Strategic recommendations and roadmap input.

• Implementation or remediation activities.
• Full environment inventory.
• Detailed runbook creation.
• Exhaustive data collection or analysis.
• Ongoing operational support.

• 7 years of Microsoft 365 architecture and administration experience.
• Deep expertise with Microsoft Entra  (Azure AD).
• SharePoint Online, Microsoft Teams, Exchange Online.
• Microsoft Intune / Endpoint Management.
• Hands‑on experience implementing and assessing Conditional Access, MFA, RBAC, and privileged access control.

• Working knowledge of Microsoft Defender, Microsoft Purview (DLP, retention, sensitivity labeling).
• Understanding of access governance, data protection, and exposure risk.
• Security considerations related to Microsoft Copilot.

• Proven experience conducting Microsoft 365 tenant assessment.
• Security posture review.
• Architecture and governance evaluation.
• Ability to quickly identify risks and patterns without over‑analyzing.
• Strong documentation and stakeholder communication skills.

• Experience conducting Microsoft Copilot readiness assessments.
• Consulting, advisory, or professional services background.
• Experience working in low‑maturity or poorly documented environments.
• Ability to communicate technical findings in business terms.

• Prioritize actionable insights over exhaustive analysis.
• Use sampling methodologies rather than full‑scale audits.
• Avoid unnecessary complexity and over‑engineering.
• Deliver concise, decision‑ready recommendations.
• Thrive in fast‑paced, fixed‑scope engagements.