Hands‑on help securing Entra ID, Intune, Defender and Purview.
Migrating to Microsoft, federating with Microsoft, or working on something already running there? Security and identity are my focus, but send me a short description of whatever you’re dealing with and we’ll figure out the best path from here.
Nick Schmitz
I’m a Principal Microsoft Security Architect with over six years in Microsoft 365 security, across identity, endpoints and Microsoft cloud architecture. Before tech I was a sheriff’s deputy and then a police officer, which is where I learned to stay calm and explain things plainly when a situation is going sideways.
- SC-100
- SC-300
- SC-401
- SC-500
- MS-102
- MD-102
What I help with
Changes go in stages, in report-only mode or with a pilot group first, so you see the effect before anyone gets locked out.
Identity and access
Conditional Access built around how your people work and tested against token theft and device code phishing, plus phishing-resistant MFA, token protection, cleaning up guest access, and moving off Okta or Ping to Entra ID.
Endpoint security
Intune for laptops that aren’t managed yet, or a move from another device management tool: enrollment, compliance and app deployment, plus Defender for Endpoint and Defender for Identity. Device compliance feeds Conditional Access, so only managed devices reach company data.
Security assessments
For a tenant you inherited, an audit or insurance renewal coming up, or just wanting to know where you stand: I check identity, device, email and data settings against the CIS benchmark and the attacks that actually happen, then walk your team through what to fix first.
Data protection
Purview sensitivity labels, data loss prevention and retention, so sensitive files are labeled, stay where they belong, and are kept for as long as they should be.
Certified SC-401: Information Security Administrator Associate