Job Title

Microsoft 365 Security Architect (Defender, Purview & Zero Trust)

Job Summary

We are seeking an experienced Microsoft 365 Security Architect with 8-10 years of Cyber Security experience and deep expertise in Microsoft 365 Security, Microsoft Defender, Microsoft Purview, and Zero Trust architecture. The ideal candidate will lead the design, implementation, and continuous improvement of enterprise Microsoft 365 security solutions, ensuring the protection of users, endpoints, identities, email, and sensitive organizational data.

The candidate will work closely with Security Operations, Infrastructure, Identity & Access Management, Compliance, and Cloud Engineering teams to develop and implement enterprise-wide security strategies aligned with Microsoft's security best practices.

Experience Required

• 8-10 Years of Cyber Security experience.
• Minimum 5+ years of hands-on Microsoft 365 Security experience.
• Experience designing and implementing enterprise Microsoft Security solutions.

Primary Responsibilities

• Design and implement enterprise Microsoft 365 Security architecture.
• Secure Microsoft 365 services including Exchange Online, SharePoint Online, Teams, OneDrive, and Entra ID.
• Design and implement Zero Trust Security Architecture across Microsoft cloud environments.
• Configure and manage Microsoft Entra ID (Azure AD) including:
  • Multi-Factor Authentication (MFA)
  • Conditional Access Policies
  • Identity Protection
  • Privileged Identity Management (PIM)
  • Identity Governance
• Implement and manage Microsoft Defender solutions:
  • Microsoft Defender for Office 365
  • Microsoft Defender for Endpoint
  • Microsoft Defender for Identity
  • Microsoft Defender for Cloud Apps
• Configure and maintain Microsoft Purview solutions:
  • Data Loss Prevention (DLP)
  • Sensitivity Labels
  • Information Protection
  • Data Classification
  • Insider Risk Management
  • Compliance Manager
  • eDiscovery
• Monitor, investigate, and respond to security incidents using Microsoft Sentinel.
• Develop security baselines and governance policies aligned with Microsoft security frameworks.
• Secure endpoints using Microsoft Intune and Endpoint Manager.
• Perform threat detection, incident response, vulnerability assessments, and remediation.
• Collaborate with SOC, IAM, Infrastructure, and Compliance teams to improve the organization's security posture.
• Conduct security assessments and recommend improvements based on Microsoft best practices.
• Create architecture documentation, security standards, and operational procedures.
• Stay updated on emerging Microsoft security technologies and cyber threats.

Mandatory Technical Skills

Microsoft Security

• Microsoft 365 Security
• Microsoft Defender Suite
• Microsoft Defender for Endpoint
• Microsoft Defender for Office 365
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps

Identity & Access Management

• Microsoft Entra ID (Azure AD)
• Conditional Access
• Multi-Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• Identity Protection
• Identity Governance

Data Security

• Microsoft Purview
• Data Loss Prevention (DLP)
• Sensitivity Labels
• Information Protection
• Data Classification
• Compliance Manager
• eDiscovery

Security Operations

• Microsoft Sentinel
• Security Incident Response
• Threat Hunting
• Threat Protection
• Security Monitoring
• Security Operations Center (SOC)

Endpoint Security

• Microsoft Intune
• Endpoint Manager
• Device Compliance
• Endpoint Protection

Security Architecture

• Zero Trust Architecture
• Microsoft Security Best Practices
• Enterprise Security Architecture
• Risk Assessment
• Security Governance

Preferred Skills

• Microsoft Defender XDR
• Azure Security Center
• Microsoft Defender for Cloud
• Microsoft Secure Score
• Cloud Security
• SIEM/SOAR
• PowerShell Automation
• Azure Automation
• Microsoft Graph API
• Compliance & Regulatory Frameworks (ISO 27001, NIST, CIS)

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Cyber Security, or related field.
• 8-10 years of Cyber Security experience.
• Strong Microsoft 365 Security architecture experience.
• Hands-on expertise with Defender, Purview, Entra ID, Intune, and Sentinel.
• Experience implementing Zero Trust security models.
• Excellent troubleshooting and incident response skills.
• Strong communication and stakeholder management skills.