Microsoft 365 Security Implementation

OVERVIEW
We are implementing a fully designed, security-first Microsoft 365 environment across multiple tenants. The architecture, role model, access mappings, Conditional Access matrix, and compliance controls have already been meticulously designed and approved.
We are not looking for an architect to redesign or simplify the model.
We are looking for a highly disciplined Microsoft 365 security implementation engineer who can execute the defined architecture precisely and without deviation.
This is a configuration-heavy, control-plane-focused engagement requiring strong hands-on experience with Entra ID, Conditional Access, Intune, Microsoft Purview, and Windows 365 / Azure Virtual Desktop.
SCOPE OF WORK
You will be responsible for implementing the following domains strictly according to provided specifications:
Identity & Access Control
• Entra ID role group creation (RG → AG model)
• Group-based access enforcement (no direct user permissions)
• Privileg...