Contract Email Security Consultant (Microsoft Defender for Office 365, MDI, Mimecast Migration)

Contract length: 3 months (extension likely) Location: Fully remote, with overlap to UK business hours Rate: Competitive day rate, depending on experience Start: ASAP Company: ServQual Ltd

About ServQual

ServQual is a cybersecurity, privacy and GRC consultancy operating across the UK, EU, India, USA and UAE. We deliver vCISO and vDPO services, penetration testing, ISO 27001, privileged access management and enterprise security transformation programmes for clients ranging from regulated financial services to global staffing and industrial groups.

The role

We are looking for an experienced email security consultant to join a live enterprise migration moving a multi country estate off a third party secure email gateway (Mimecast) onto native Microsoft Defender for Office 365, alongside a parallel Microsoft Defender for Identity rollout.

This is hands on delivery work, not advisory. You will be extracting and translating legacy gateway policy, building and tuning the target MDO configuration, planning and executing mail routing and MX changes, and documenting everything to enterprise change control standards.

What you will be doing

- Extract, analyse and document legacy Mimecast gateway policies (permitted and blocked senders, impersonation protection, spoof allow, bypass rules, stationery, directory connector behaviour) and map them to native MDO equivalents
- Build and tune MDO threat policies: anti phishing, anti spam, anti malware and Common Attachment Filter, Protected Links, Safe Attachments, quarantine policies, Tenant Allow/Block List, Accepted Domains and Enhanced Filtering
- Design and implement Exchange Online transport rules, connectors and hybrid mail flow changes
- Plan and execute MX record changes and mail routing cutover,



including SPF, DKIM and DMARC alignment, TTL planning, coexistence and rollback positions
- Run group scoped pilot waves, monitor false positives and negatives through Threat Explorer, and tune before estate wide cutover
- Support the Defender for Identity workstream: sensor deployment across domain controllers, AD FS, AD CS and Entra Connect servers, gMSA and DSA configuration, sensor health and alert tuning across multiple forests
- Feed MDO and MDI signal into Microsoft Sentinel (connectors, analytics rules, workbooks)
- Produce HLD, LLD, build checklists, cutover runbooks, RAID entries and weekly status reporting
- Run hypercare after each cutover wave and hand over cleanly to the client operations team

Essential experience
- Demonstrable delivery of at least one Mimecast (or Proofpoint, Symantec, Barracuda) to Microsoft Defender for Office 365 migration
- Deep hands on MDO administration: EOP plus Defender for Office 365 Plan 1 and Plan 2, threat policies, Explorer, quarantine, Tenant Allow/Block List
- Strong Exchange Online administration and PowerShell (Exchange Online Management module, Microsoft Graph)
- Solid DNS and mail flow fundamentals: MX, SPF, DKIM, DMARC, TLS, connectors, hybrid routing
- Microsoft Defender for Identity deployment and tuning experience in a multi domain or multi forest Active Directory estate
- Comfortable working inside formal change control with CAB approvals, defined maintenance windows and named rollback plans
- Clear written English and genuinely good documentation skills, since design docs and runbooks are contractual deliverables here

Desirable
- SC 200, MS 102, SC 100 or AZ 500 certification
- Microsoft Sentinel and KQL
- Experience of phased, country by country migrations across a large international estate
- Experience coordinating with third party AD, network or managed service teams

📌 Email Security Consultant (Microsoft Defender for Office 365 / Mimecast) (India)
🏢 ServQual - Security
📍 India