Configure Azure AD MFA Security

I need an Azure Active Directory specialist to harden our tenant by turning on multi-factor authentication for every user. The job is straightforward but must be done cleanly: enable MFA across the board, confirm it is enforced, run a small set of validation tests, and document exactly what was changed so I can maintain it later.

Key deliverables:
• Create or adjust security policies that require MFA for all existing and future accounts
• Verify the rollout with test logins and provide a short troubleshooting guide
• Supply a step-by-step hand-off document (screenshots or video acceptable)

Everything will be completed directly in our Azure portal; I will grant temporary admin rights. Ideally you have hands-on experience with Conditional Access, security defaults, and the Microsoft Authenticator app, and can finish within a day once access is provided.