M365 Security Consultant (Outside IR35) Day Rate: £550 p/d Contract Length: 3–6 months (initial 3‑month engagement with possible extension) Location: Remote – MUST be based in the UK Engagement: Outside IR35 Start: ASAP We are seeking a highly capable, delivery‑focused M365 Security Consultant to execute a series of time‑boxed security improvement phases across device management, identity, access, and multiple site security. This role is not advisory or architectural only—the contractor must deliver hands‑on implementation of security controls aligned to: CIS Critical Security Controls v8 – IG2 CIS Benchmarks NIST Cybersecurity Framework – Tier 3 (Repeatable) Key Responsibilities Mobile Device Management (MDM) Design MDM setup for corporate and BYOD devices. Define required MDM/MAM/Conditional Access configuration aligned to CIS IG2. Implement and enforce: Corporate and BYOD MDM policies Separate compliance & Conditional Access policies MAM controls and approved application enforcement Deploy applications via Company Portal. Document configuration, exceptions, and operational guidance. Ensure security and compliance visibility/reporting is operational. Identity, SSO & MFA Assess current identity and authentication controls. Define scope and implementation plan for SSO and MFA. Implement SSO/MFA policies and Conditional Access configurations. Enforce authentication policies with evidence of operation. Deliver operational documentation and testing evidence. Device Hardening & “Bricks & Morter” Security Define device hardening baselines aligned to CIS Benchmarks. Implement and enforce the hardening baseline using technical controls. Conduct multiple site location security and architecture review. Deliver and implement actionable security remediation. Evidence compliance and enforcement. Required Experience Technical Expertise Proven hands‑on experience implementing Intune/Endpoint Manager for Corporate BYOD environments. Strong capability implementing MAM, Conditional Access, App Protection Policies, and Zero Trust aligned controls. Solid experience with Azure AD / Entra ID, MFA, SSO, and identity governance. Practical delivery of security hardening aligned to CIS Benchmarks. Experience working with retail or distributed site/store environments (desirable). Security Framework Knowledge Deep understanding of: CIS Controls v8 (IG2) CIS Benchmarks NIST CSF (Tier 3 maturity) Delivery Profile Must be a hands‑on implementer (not advisory or consultancy only). Able to work in fast‑paced, time‑boxed delivery cycles. Comfortable with weekly milestone reporting and governance. Capable of documenting exceptions, justifications, and compensating controls. Key Deliverables MDM current-state assessment and CIS‑aligned configuration design. Implemented MDM, MAM, and Conditional Access policies in production. Fully implemented and enforced MFA and SSO. Auth, device, and application compliance reporting. Enforced CIS‑aligned device hardening baseline. Implemented store security improvements. Complete technical documentation, evidence of implementation, and handover materials. Documented control exceptions with technical justification