Job Title: Microsoft AD Security & Purview Consultant

We are seeking an experienced Microsoft Security and Compliance Consultant to design and implement Active Directory security hardening, Microsoft Purview data protection, and Microsoft 365 compliance solutions.

Key Responsibilities

- Review and remediate privileged access risks, including AdminSDHolder, SDProp, protected groups, and excessive AD delegations.
- Design and implement AD administrative tiering across Tier 0, Tier 1, and Tier 2 environments.
- Harden NTLM and Kerberos authentication, including NTLMv1 disablement and AES-based Kerberos encryption.
- Configure DHCP failover and validate service continuity.
- Develop AD disaster-recovery and forest-recovery runbooks and conduct recovery testing.
- Prepare change plans, rollback procedures, validation evidence, remediation reports, and residual-risk documentation.
- Configure Microsoft Defender for Identity sensors, sensitive accounts, honeytoken accounts, alerts, and notifications.
- Implement Microsoft Purview sensitivity labels, classification, auto-labelling, document protection, tracking, and revocation.
- Configure DLP policies across Exchange Online, SharePoint, OneDrive, Teams, Windows, and macOS endpoints.
- Implement Defender for Cloud Apps capabilities,



including SaaS application monitoring, Shadow IT discovery, session controls, threat detection, and data-governance policies.
- Configure retention policies, retention labels, inactive and archive mailboxes, disposition reviews, and file-plan management.
- Implement Insider Risk Management, Communication Compliance, Information Barriers, Customer Lockbox, and eDiscovery workflows.
- Integrate security and compliance alerts with Microsoft Sentinel and configure operational reports and notifications.

Required Skills

- Robust hands-on experience with Active Directory, Group Policy, Kerberos, NTLM, DHCP, privileged-access security, and AD disaster recovery.
- Expertise in Microsoft Purview, Microsoft Defender for Identity, Defender for Cloud Apps, Endpoint DLP, Microsoft Sentinel, Entra ID, Intune, and Microsoft 365.
- Experience implementing security controls within approved change windows with rollback and validation procedures.
- Strong understanding of data classification, DLP, retention, insider-risk management, compliance monitoring, and regulatory requirements such as DPDPA.
- Excellent documentation, stakeholder-management, troubleshooting, and security-risk assessment skills.

📌 Microsoft AD Security & Purview Consultant (Kolkata)
🏢 Tuteck
📍 Kolkata