Domain
Expected Expertise
Identity & Access Management
Active Directory / Entra ID, Entra Connect, Conditional Access, MFA, PIM, RBAC, hybrid identity design.
Infrastructure & Hardening
AD DS, GPO, DNS, DHCP, DFS; account/group management; Windows Server hardening and security policies.
Messaging & Collaboration
Exchange On-Prem and Online, hybrid configuration, mail security (SPF/DKIM/DMARC), anti-phishing, migration from On-Prem to Online.
Endpoint Security & Compliance
Intune, Defender for Endpoint, update management, compliance policies, MDM/MAM, device reporting, security baselines.
Automation & Reporting
Advanced PowerShell scripting for administration, compliance, and auditing.
Cloud Security & Governance
M365 governance, Secure Score, sensitivity labels, IP & DLP, audit logs, Defender for Cloud integration.
Monitoring & Incident Response
Microsoft 365 Defender portal, Sentinel or equivalent SIEM, alerts triage, investigation and troubleshooting.