Cloud Solution Architect – Security

Location: United States (Remote) – Houston, TX preferred

Invoke, the 2025 Microsoft Identity Partner of the Year and a top 10 U.S. Microsoft Security partner, is seeking a Cloud Solution Architect to guide customers from security strategy through implementation across cloud and hybrid environments, including the AI agents operating within them. As a trusted advisor, you’ll partner with business and IT leaders to assess security posture, shape roadmaps and target operating models, and define the policies, processes, and metrics that align to frameworks such as Zero Trust, NIST, and CIS.

In delivery, you’ll design and deploy Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Microsoft Security Copilot agents, and exposure management solutions, and use Microsoft Agent 365 to extend Microsoft Entra, Defender, and Purview controls to AI agents. The ideal candidate is equally comfortable advising executives and getting hands-on, combining deep technical expertise with practical governance design and change management skills.

In the Cloud Solution Architect role, you will lead customer-facing engagements on some of the largest and most advanced security projects, guiding organizations as they modernize security operations and adopt Microsoft security capabilities across cloud, hybrid, and AI environments.

Key responsibilities include:

• Security Strategy & Advisory: Assess security posture, build roadmaps and target operating models aligned to Zero Trust, NIST, and CIS, and serve as a trusted advisor to business and IT leaders through ongoing guidance.
• Security Operations: Deploy Microsoft Defender XDR and Microsoft Sentinel as a unified SIEM and XDR platform in the Microsoft Defender portal, including transitioning existing Sentinel environments from the Azure portal; build cross-domain detections, automated response, and threat hunting enriched by Microsoft Threat Intelligence; and use Microsoft Security Copilot agents to accelerate triage, investigation, and response.
• Threat Prevention & Hardening: Implement Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender for Cloud to protect endpoints, email, identities, SaaS apps, and multi-cloud workloads, including attack surface reduction, exploit and network protection, and phishing defenses.
• Exposure & Posture Management: Use Microsoft Security Exposure Management, Microsoft Defender Vulnerability Management, and cloud security posture management in Defender for Cloud to map attack paths, identify critical assets, and prioritize remediation of vulnerabilities and misconfigurations.
• Identity Threat Protection: Enforce risk-based Conditional Access with Microsoft Entra , deploy phishing-resistant authentication, and apply least-privilege and just-in-time access with Microsoft Entra Privileged Identity Management to reduce credential theft and privilege escalation.
• Data Security: Implement Microsoft Purview Information Protection, Data Loss Prevention, Insider Risk Management, and Data Security Posture Management (DSPM) for AI to protect sensitive data across Microsoft 365, cloud apps, and AI tools.
• AI Agent Governance & Security: Implement Microsoft Agent 365 to discover, register, govern, and monitor enterprise AI agents; extend Microsoft Entra Agent , Defender, and Purview controls to agents; and establish lifecycle and operational policies for agent adoption.

You will be responsible for the full engagement life cycle (discovery, analysis, design, implementation, and ongoing advisory) while confidently leading customer workshops and executive discussions.

• A minimum of 5 years of experience in IT consulting…