Security solution Architect

Job Title: Security Solution Architect
Location: Bellevue, WA – Remote
Rate: $70/hr
Job Type: Contract

Job Overview

We are seeking an experienced Security Solution Architect to own and grow a portfolio of enterprise client security engagements built on the Microsoft Security platform. The architect will serve as a senior security advisor, translating business risks into secure architecture decisions, governing security operations, and leading security engineers and analysts.

This is a high-visibility role covering security strategy, architecture, delivery, client relationship management, and technical leadership.

Key Responsibilities

• Own the end-to-end security posture across multiple enterprise clients and serve as the primary security escalation point.
• Architect and implement Microsoft-native security solutions across Identity, Endpoint, Cloud, SIEM, and Compliance domains.
• Design and manage Microsoft Sentinel solutions, including KQL, analytics rules, workbooks, automation, and SOAR playbooks.
• Lead threat detection, incident response, and vulnerability management using Microsoft Sentinel, Defender XDR, and Entra ID.
• Implement and govern Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows.
• Drive security assessments, risk reporting, security roadmaps, and compliance initiatives aligned with business objectives.
• Secure Microsoft 365 environments using Defender for Office 365, Microsoft Purview, DLP, and Compliance Manager.
• Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust strategies.
• Lead and mentor security engineers and analysts.
• Conduct QBRs, executive briefings, security reviews, and roadmap discussions with client stakeholders.
• Manage endpoint security and policy enforcement using Microsoft Intune.
• Manage multiple client accounts with accountability for SLAs, security outcomes, and service delivery.
• Collaborate with sales and pre-sales teams on security proposals, SOW development, solution scoping, and capability demonstrations.
• Translate complex cybersecurity risks and technical findings into clear business-level recommendations.
• Stay current with emerging threats, Microsoft security product releases, and security frameworks.

Required Qualifications

• 10+ years of progressive cybersecurity experience.
• At least 5 years of client-facing consulting or Managed Security Services (MSS/MDR) experience.
• Strong hands-on experience with the Microsoft Security ecosystem.
• Deep expertise in Microsoft Sentinel, KQL, analytics rules, and SOAR/Logic Apps.
• Strong experience with Microsoft Defender XDR and related Defender products.
• Extensive experience with Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows.
• Experience with Microsoft Intune for endpoint management and security policy enforcement.
• Strong knowledge of Microsoft Purview, DLP, Compliance Manager, and Microsoft Defender for Cloud Apps.
• Experience designing and implementing Zero Trust and IAM governance frameworks.
• Strong understanding of NIST, CIS, and ISO 27001 security frameworks.
• Experience managing multiple enterprise clients, SLAs, and security outcomes.
• Excellent executive communication, presentation, and stakeholder management skills.
• Experience working with sales/pre-sales teams on security solutions and proposals.

Microsoft Technology Stack

Security & SIEM

• Microsoft Sentinel
• Defender XDR
• Defender for Endpoint
• Defender for Cloud
• Defender for Identity
• Defender for Office 365

Identity & Access Management

• Microsoft Entra ID
• Entra PIM
• Identity Governance
• Conditional Access
• Lifecycle Workflows
• Entra Agent ID

Compliance, Productivity & AI

• Microsoft Purview
• Microsoft Intune
• Security Copilot
• Microsoft 365 E5 Security
• Microsoft Defender for Cloud Apps
• Azure Policy

Supporting Technologies

• Azure Security Center
• KQL
• Logic Apps / SOAR
• Microsoft Graph API
• Microsoft Entra Lighthouse / Multi-tenant management
• PowerShell
• Azure CLI