Hands-on role to administer Microsoft identity, endpoint and cloud security (Entra ID, Intune, Defender, Azure). Responsibilities include EDR management, vulnerability triage, patching (including out-of-hours), incident support, compliance (ISO27001/SOC2), automation with PowerShell, and documentation to improve security posture and operational resilience.