Browse categories
Explore
Fiverr Pro
English
$
USD
I will set up entra id conditional access and mfa
DevSecOps Cloud Security Engineer AWS, Azure
DevSecOps and cloud engineer who designs, secures, and deploys production infrastructure on AWS and Azure. I build CI/CD pipelines with security gates (GitLab CI, Semgrep, Trivy, Gitleaks), automate i...
About this Gig
Most Microsoft tenants are one stolen password from a breach: MFA only half rolled out, admins without protection, old protocols still open. Conditional Access fixes that, but a wrong policy can also lock out your whole company.
I'm a DevSecOps and offensive security engineer, so I review identity the way an attacker would, then build policies that block real attacks without breaking your users.
What I do:
- Audit of Conditional Access, MFA coverage, admin roles and guest access
- Baseline policies: MFA for everyone, stronger MFA for admins, legacy auth blocked, risky sign-in rules
- Emergency break-glass accounts so you can never lock yourself out
- Every policy tested in report-only mode before enforcement
- Hybrid: on-prem Active Directory sync, SSO, self-service password reset, PIM
You get:
- Severity-ranked findings report
- Policies documented and ready to maintain
- Rollback plan for every change
- Handover video (Hybrid package)
Note: Conditional Access needs Entra ID P1 or higher. Message me your license type before ordering.
Cloud provider:
Microsoft Azure
Expertise:
Installation
•
Backup
•
Migration
•
Configuration
•
Performance
Cloud computing resource:
ELB
•
Route53
•
VPC
•
Security Groups
•
DNS
Other Cloud Computing Services I Offer
FAQ
Which license do I need?
Conditional Access needs Entra ID P1 (included in Microsoft 365 Business Premium and E3). Smaller tenants on the free tier can use Security Defaults, and I'll tell you which fits.
Will this lock out my users or admins?
Every policy runs in report-only mode first and I set up emergency accounts. I enforce only after we review the impact together.
What access do you need?
For the audit, Global Reader plus Security Reader. For setup, a time-limited Conditional Access Administrator role. Remove my access when I deliver.
Do you need my password?
Never. Access is a guest or delegated account that you can revoke and that shows in your audit logs.
Do you support on-prem AD sync?
Yes, in the Hybrid package, including a pre-check of your AD for sync problems.
Do you handle Microsoft 365 or Exchange admin work?
No. This gig covers identity and access only.
