Secure Microsoft Devices & Accounts

My daily work and personal life run through a single Microsoft account that ties together a Windows-based laptop and a mobile phone. I want an experienced security specialist to give these devices a thorough hardening, close every obvious gap, and leave me with an easy-to-follow plan for ongoing protection.

Scope of work
• Audit the Microsoft account settings, check sign-in logs, and enforce the strongest available multi-factor authentication.
• Review all devices currently linked to the account, remove anything suspicious, and set clear policies for future joins.
• On the Windows laptop: enable and verify full-disk encryption (BitLocker), configure Windows Defender and Firewall properly, and apply any group-policy tweaks that block unauthorized sign-ins or tampering with data.
• On the phone: confirm secure screen-lock policies, activate remote-wipe, and align its OneDrive or Outlook data with the account’s new security posture.
• Implement secure backups for both devices, ensuring my files stay protected yet recoverable.
• Document every step and provide concise after-care instructions—including any further tools or routine actions I should take to keep the setup resilient.

Acceptance
I will consider the job complete when I can log in using the hardened policies, see both devices listed as compliant in the Microsoft 365 security portal, and receive the final report outlining changes made, risks mitigated, and next-step recommendations.

If you are used to working with BitLocker, Windows Defender, Intune or similar MDM solutions and can turn complex security tasks into clear guidance, I’d like to hear how quickly you can deliver.