Principal Microsoft Cloud & AI Security Architect
Job in
Reigate, Surrey County, RH2, England, UK
Listed on 2026-02-16
Listing for:
WTW
Full Time
position Listed on 2026-02-16
Job specializations:
-
IT/Tech
Cybersecurity, Systems Engineer, Cloud Computing, Security Manager
Job Description & How to Apply Below
Overview
We are seeking a visionary Principal Microsoft Cloud & AI Security Architect to join WTWs Global Information and Cyber Security Defence (ICSD) function. This role is pivotal in designing and implementing next-generation cloud security architectures securing WTW cloud environments and driving automation and innovation with WTWs ICS Function. The candidate will work closely with the CISO, other ICS leads, as well as Cyber Defence to ensure a holistic architectural approach to WTWs technology estate.
The ideal candidate will have deep expertise in Microsoft Azure, Palo Alto, AWS and Oracle technology with detailed knowledge of Microsoft security tools and the Software Development Life Cycle.
- Architect and implement next-generation Microsoft cloud security across Azure and multi-cloud environments.
- Drive adoption of Agentic AI for Security to enable autonomous detection, adaptive response and continuous security posture improvement.
- Enhance Microsoft Sentinel with MCP (Model Context Protocol), Sentinel Data Lake and Sentinel Graph capabilities for advanced analytics, threat correlation and automated workflows.
- Optimise and ope rationalise Defender XDR, Defender for Cloud, Wiz to enhance cloud posture, workload protection and risk visibility.
- Strengthen identity protection through Entra , Conditional Access, MFA, PIM/JIT and Defender for Identity.
- Lead the automation of security operations using Sentinel Playbooks, Logic Apps, Power Automate and advanced SOAR workflows.
- Drive proactive threat detection, email threat defence and automated containment using MDO and Darktrace Email.
- Partner closely with GSOC, Incident Response, Threat Hunting, TI and Cloud Engineering teams to deliver unified detection, response and governance.
- Manage, mentor and strengthen a team of Cyber Defence Security Engineers.
- Deep expertise in Microsoft Sentinel architecture, tuning, SIEM/UEBA, KQL custom detections and threat hunting.
- Strong hands-on experience with:
- Agentic AI for Security
- Sentinel Data Lake (pipelines, analytics, cost optimisation, AI enablement)
- Microsoft Sentinel MCP for enriched, context-aware analytics
- Microsoft Sentinel Graph for automated incident correlation and graph-driven workflows
- Expertise designing security architectures across Azure with exposure to AWS, GCP, OCI or hybrid environments.
- Strong experience with Defender XDR, Defender for Cloud, CSPM, CWPP and multi-cloud security controls.
- Hands-on experience with Wiz Cloud, Wiz Defend, Wiz Runtime Sensor, Wiz Code.
- Strong ability to ope rationalise CSPM/CWP findings into actionable remediation.
- Deep understanding of Entra , Conditional Access, MFA, Identity Protection, PIM/JIT.
- Ability to define identity strategies and detect/mitigate identity-led attacks.
- Expertise with Microsoft Defender for Office 365 phishing protection, Safe Links/Attachments, automated email response and Darktrace Email.
- Strong experience developing SOAR workflows and automation pipelines using:
Sentinel Playbooks, Azure Logic Apps, Power Automate, Graph Security API, KQL-based automation. - Ability to document architectures, runbooks and processes clearly and accurately.
- Working knowledge of NIST CSF, ISO 27001, CIS Benchmarks, GDPR and SOC
2. - Ability to embed governance in cloud and SOC engineering processes.
- Experience guiding and developing engineering teams.
Qualifications
What you’ll bringMust Have
Skills:
- Deep hands-on expertise in Microsoft Sentinel, including architecture, SIEM/UEBA, KQL, custom detections, automation, Sentinel Data Lake, MCP, Sentinel Graph and Agentic AI-driven security.
- Strong experience with Wiz (Wiz Defend Runtime Sensor, Wiz Code) and solid understanding of CSPM/CWPP for cloud posture and workload protection.
- Proven ability to integrate and automate security workflows using Sentinel Graph, Microsoft Graph Security API, Playbooks, Logic…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×