Microsoft Control Access - Senior Consultant

As an experienced Senior Consultant at Deloitte Consulting, you will deliver high-quality work products within deadlines, actively leading, mentoring, and guiding junior team members. You will collaborate with onsite and offshore teams to understand functional requirements and ensure seamless project execution.

Work you'll do

As a Senior Consultant on the Cyber Operate team, you will be responsible for…

• Administer, design, and govern Microsoft Entra Conditional Access policies across production and non-production environments, including policy assignments, conditions, grant controls, session controls, naming standards, and exclusion governance.
• Configure and support access controls for users, groups, roles, cloud applications, guests, workload identities, and devices, including multifactor authentication (MFA), authentication strengths, compliant or hybrid-joined device requirements, and risk-based policies.
• Manage the policy lifecycle through What If analysis, report-only mode, phased rollouts, change records, testing, approvals, rollback planning, post-change validation, and emergency-access account monitoring.
• Provide Level 3 troubleshooting for sign-in and access issues; analyze policy evaluation details, Microsoft Entra sign-in logs, KQL queries, and Microsoft Sentinel data; and manage incident, service request, problem, and change activities in ServiceNow.
• Automate repeatable policy reporting, backup, drift detection, and administration using approved tools, including Microsoft Graph PowerShell; maintain dashboards, reports, runbooks, knowledge articles, and technical documentation.
• Lead client operational reviews and policy-design workshops; coordinate onsite and offshore activities; mentor junior staff; communicate access impacts and remediation actions; and contribute technical insights to managed-services solution design.

The team

Deloitte's Cyber Operate teams manage clients' critical cyber assets either as a fully managed service or in partnership with clients. They deliver skilled talent, cutting-edge technologies, and robust processes to operate client cyber capabilities. This includes:

• Managing Identity Lifecycle
• Security Operations
• Threat Intelligence
• Application Security
• Business Transformation
• Continuous Compliance.

Cyber Operate team focuses on efficiently running operations by enabling automation, reducing manual effort and adhering to Service Level Agreements (SLAs) based on the standards set by clients.

Location: Bengaluru / Hyderabad / Pune / Chennai

Shift Timings: 24/7 rotational shifts; on-call support based on project assignment

Qualifications

Required:

Must have skills/ Project experience/ Certifications

• 6 -10 years total experience in IAM or cybersecurity operations, including at least 4 years designing and operating Microsoft Entra Conditional Access in an operational or managed services capacity.
• Expert knowledge of Conditional Access: policy design, grant and session controls, authentication strengths, continuous access evaluation, token protection, report-only mode and What If analysis, risk-based policies (Entra ID Protection), device compliance (Intune), named locations, and emergency-access account design.
• Strong working knowledge of Microsoft Entra ID and hybrid identity: Active Directory, Entra Connect/Cloud Sync, PIM, B2B collaboration, SSO and federation (SAML, OAuth 2.0/OpenID Connect), and MFA/passwordless authentication.
• Solid understanding of Zero Trust and least privilege principles, and of compliance frameworks such as NIST SP 800-53/800-207, ISO 27001, SOC 2, HIPAA, and PCI DSS.
• Technological skills in automation, PowerShell scripting, Microsoft Graph and REST APIs, and KQL for troubleshooting, reporting, and monitoring.
• Deep understanding of operational processes, incident resolution, change management, and compliance management; proficiency with process documentation, SLAs, reporting, and ITSM practices (ServiceNow).
• Experience leading support teams, mentoring juniors, and managing enhancement/implementation projects; able to communicate effectively with stakeholders and clients at all levels.
• Preferred certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300); ITIL.

Preferred:

Good to have skills/ Project experience/ Certifications:

• Microsoft Certified: Cybersecurity Architect Expert (SC-100), Azure Security Engineer (AZ-500), or Security Operations Analyst (SC-200).
• Experience with Global Secure Access, Defender for Cloud Apps, Intune, Defender XDR, and Microsoft Sentinel.
• Experience with Microsoft Security Copilot agents, or Conditional Access policy-as-code (Microsoft Graph, Terraform, Microsoft365DSC, CI/CD pipelines).
• Hands-on experience with other identity platforms (e.g., Okta, Ping) or privileged access tools used in managed services.
• Involvement in process improvement or internal training; CISSP, CISM, or CCSP certification

Education:

• BE/B.Tech/M.C.A./M.Sc (CS) degree or equivalent from accredited university