Microsoft 365 Security Architect

Microsoft 365 Security Architect

We are seeking an experienced Microsoft 365 Security Architect with 8–10 years of Cyber Security experience and deep expertise in Microsoft 365 Security, Microsoft Defender, Microsoft Purview, and Zero Trust architecture. The ideal candidate will lead the design, implementation, and continuous improvement of enterprise Microsoft 365 security solutions, ensuring the protection of users, endpoints, identities, email, and sensitive organizational data.

The candidate will work closely with Security Operations, Infrastructure, Identity & Access Management, Compliance, and Cloud Engineering teams to develop and implement enterprise-wide security strategies aligned with Microsoft's security best practices.

Design and implement enterprise Microsoft 365 Security architecture.

Secure Microsoft 365 services including Exchange Online, SharePoint Online, Teams, One Drive, and Entra .

Design and implement Zero Trust Security Architecture across Microsoft cloud environments.

Configure and manage Microsoft Entra  (Azure AD) including:
Multi-Factor Authentication (MFA), Conditional Access Policies, Identity Protection, Privileged Identity Management (PIM), Identity Governance.

Implement and manage Microsoft Defender solutions:
Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps.

Configure and maintain Microsoft Purview solutions:
Data Loss Prevention (DLP), Sensitivity Labels, Information Protection, Data Classification, Insider Risk Management, Compliance Manager, eDiscovery.

Monitor, investigate, and respond to security incidents using Microsoft Sentinel.

Develop security baselines and governance policies aligned with Microsoft security frameworks.

Secure endpoints using Microsoft Intune and Endpoint Manager.

Perform threat detection, incident response, vulnerability assessments, and remediation.

Collaborate with SOC, IAM, Infrastructure, and Compliance teams to improve the organization's security posture.

Conduct security assessments and recommend improvements based on Microsoft best practices.

Create architecture documentation, security standards, and operational procedures.

Stay updated on emerging Microsoft security technologies and cyber threats.

Microsoft 365 Security, Microsoft Defender Suite, Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps.

Microsoft Entra  (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), Identity Protection, Identity Governance.

Microsoft Purview, Data Loss Prevention (DLP), Sensitivity Labels, Information Protection, Data Classification, Compliance Manager, eDiscovery.

Microsoft Sentinel, Security Incident Response, Threat Hunting, Threat Protection, Security Monitoring, Security Operations Center (SOC).

Microsoft Intune, Endpoint Manager, Device Compliance, Endpoint Protection.

Zero Trust Architecture, Microsoft Security Best Practices, Enterprise Security Architecture, Risk Assessment, Security Governance.

Microsoft Defender XDR, Azure Security Center, Microsoft Defender for Cloud, Microsoft Secure Score, Cloud Security, SIEM/SOAR, Power Shell Automation, Azure Automation, Microsoft Graph API, Compliance & Regulatory Frameworks (ISO 27001, NIST, CIS).

Bachelor's degree in Computer Science, Information Security, Cyber Security, or related field.

8–10 years of Cyber Security experience.

Strong Microsoft 365 Security architecture experience.

Hands-on expertise with Defender, Purview, Entra , Intune, and Sentinel.

Experience implementing Zero Trust security models.

Excellent troubleshooting and incident response skills.

Strong communication and stakeholder management skills.