Senior Microsoft 365 Security & Compliance Architect

Job Title: Senior Microsoft 365 Security & Compliance Architect

Location: Addison, TX (Onsite required)

Duration: Contract - 12 months

Pay Range: $80.24/hr (W2)

Job ID: 410350

About BCforward

BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.

Job Description

We are seeking a Microsoft 365 Security & Compliance Architect to join our dynamic team. The ideal candidate will have strong experience in Microsoft 365 architecture, security, compliance, governance, and cloud service engineering and a proven ability to design and implement secure, compliant, and scalable enterprise solutions aligned to regulatory and corporate standards.

Responsibilities:

• Lead the architecture, design, and implementation of Microsoft 365 security, compliance, governance, and risk management solutions across the enterprise.


• Define and maintain security and compliance frameworks aligned with regulatory requirements, corporate policies, and industry best practices.


• Architect cloud-based productivity solutions with focus on data protection, information governance, identity security, regulatory compliance, automation, scalability, and resiliency.


• Provide architectural leadership for Microsoft 365 services, including security controls, compliance capabilities, monitoring, audit readiness, and governance processes.


• Partner with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to ensure solutions meet enterprise and regulatory requirements.


• Develop and maintain architectural standards, design artifacts, roadmaps, and governance documentation to support operational excellence and compliance objectives.


• Assess existing platforms and processes, identify security and compliance gaps, and recommend remediation strategies and long-term improvements.


• Provide technical leadership and guidance on Microsoft Purview, DLP, Information Protection, Records Management, Insider Risk, eDiscovery, Compliance Manager, and related M365 compliance services.


• Establish and champion engineering practices that support secure delivery, operational effectiveness, and continuous compliance.


• Support initiatives from proofs of concept and emerging technologies to large-scale enterprise transformations and multi-year programs.


• Drive automation and control implementation to enhance monitoring, reporting, policy enforcement, and governance across M365 services.


• Serve as a trusted advisor to leadership on security strategy, compliance requirements, risk management, and technology investments.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Technology, Engineering, or equivalent hands-on experience.


• 10+ years of architecture and engineering experience across email and collaboration services.


• Expert knowledge of collaboration services in cloud and on-premises environments.


• Expertise in directory services, Conditional Access, Identity and Access Management, security and compliance, data loss prevention, and data classification.


• Working knowledge of Active Directory, DNS/DHCP, routing, and PowerShell scripting.


• Proven design and engineering experience across collaboration technologies at enterprise scale.


• Expertise with data loss prevention services including deployment, configuration, and administration.


• Ability to translate granular requirements into strategic, holistic solutions and artifacts.


• Ability to work independently and collaborate with business and technical teams to define requirements and technical deliverables.


• Strong prioritization, organization, and time management skills with attention to detail.


• Ability to create architecture documents including network and data flows and test scope.


• Strong interpersonal skills with clear verbal and written communication in English.


• Familiarity with ITIL foundations and Agile methodologies.

Preferred Skills:

• Experience with enterprise security including TLS, SMTP over TLS, certificates, HSM, and NIST standards.


• Experience with Microsoft 365 services including OneDrive, SharePoint Online, Exchange Online, and Teams.


• Knowledge of authentication mechanisms such as domain authentication, OAuth/Modern Authentication, and Kerberos.


• Experience with Windows environments and network/security components including load balancers, proxies, and firewalls.


• Understanding of financial regulatory, legal, and compliance requirements.


• MCP or higher certification.

Role Logistics

• Engagement: Project CaP End of Life Enterprise Applications Remediation.


• Start: November target, may accelerate based on readiness.


• Assessment: GLIDER required. ID will be provided.


• Worksite: Addison TX8-044-02-18.


• Hours per Day: 8. Labor Type: Technical.

Why BCforward?

At BCforward, we believe in advancing lives and careers. When you join our team, you gain access to:

• Competitive compensation and benefits.


• Opportunities for growth with global clients.


• A supportive, inclusive culture that values innovation and people.


• Exposure to cutting-edge technologies and projects.

About Our Commitment

BCforward is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status.

Interested? Apply Now!

If this sounds like the right opportunity for you, please apply with your most recent resume.