Designs, implements, and optimizes Microsoft 365 security, compliance, identity, data governance, and AI-agent controls. Configures Purview, Entra ID, Defender, DLP, retention, eDiscovery, Conditional Access, MFA, RBAC, and privileged access. Assesses client environments, identifies gaps, develops remediation plans, and delivers technical documentation, workshops, testing, implementation, and knowledge transfer. Requires strong consulting, customer-facing, documentation, and PowerShell automation skills.