Microsoft 365 Business Premium Security Consultant

We are a small U.S.-based promotions agency with about 10 users. We need an experienced Microsoft 365 Business Premium security consultant to help us review, secure, and harden our Microsoft 365 tenant. Security is the primary focus. We also use Windows 365 Cloud PCs and need someone who understands how Windows 365, Intune, Entra ID, Conditional Access, Defender for Business, and Microsoft 365 security policies work together. We also need help migrating our remaining Google Workspace services to Microsoft 365, but this is limited to email, contacts, and calendars. Our files and chats are already in Microsoft Teams / SharePoint. No Google Drive migration is needed. We handle client files, contracts, promotion administration materials, and privacy-sensitive information, so we need real Microsoft 365 security-hardening experience. We are not looking for someone whose experience is mainly scripting, basic admin work, Teams troubleshooting, or migration-only work. Project phases Initial Microsoft 365 security lockdown, including Windows 365 Cloud PC review. Google email, contacts, and calendar migration to Microsoft 365. Post-migration security cleanup and hardening. Optional later work: sensitivity labels, retention, DLP, Purview, and advanced security settings. Required experience Please apply only if you have hands-on experience with: Microsoft 365 Business Premium security hardening. Windows 365 Cloud PC security and administration. Intune, Entra ID, MFA, Conditional Access, and admin role security. Exchange Online security. Teams, SharePoint, and OneDrive governance. Defender for Business. Google Workspace email/calendar/contact migration to Microsoft 365. Coordinating mail cutover timing. We can manage DNS records internally, but the consultant must understand how MX, SPF, DKIM, and DMARC affect the migration. An NDA, identity verification, and background check will be required. Preferred certifications Helpful certifications include Microsoft 365 Administrator Expert, Identity and Access Administrator, Cybersecurity Architect, Endpoint Administrator, or Information Security Administrator. Teams Administrator or Security Operations certifications are helpful, but not enough by themselves. To apply Please start your application with the word staples as the first word in your application and answer these questions: 1. What is your experience hardening Microsoft 365 Business Premium tenants and securing or administering Windows 365 Cloud PCs? 3. What Microsoft 365 security changes do you typically recommend for a small business? 4. Describe your experience migrating Google email, contacts, and calendars to Microsoft 365. 5. What relevant Microsoft certifications do you have? 6. What documentation or deliverables do you normally provide after a Microsoft 365 security review? This is a small 10-user company. We want someone practical, experienced, and security-minded. This is a short-term engagement, not a long enterprise-style engagement.