Cloud Solution Architect- Security

• Drive positive customer satisfaction, act as a trusted advisor, and serve as the Voice of the Customer by sharing insights and best practices
• Collaborate with Microsoft Global Security, Engineering, and Product teams to remove blockers and influence solution roadmaps
• Deliver an end-to-end value proposition for Microsoft Security (e.g., Zero Trust) across the full portfolio, with emphasis on Threat Protection, Identity & Access Management, and Cloud Security
• Position and deliver solutions that increase security product usage, identify opportunities to drive Customer Success outcomes, and help customers realize value from Microsoft investments in partnership with Customer Success Account Managers and account teams
• Resolve customer blockers by leveraging subject matter expertise and Microsoft best practices
• Use repeatable IP to accelerate business value, improve security posture, and ensure solutions follow the “Secure by Design” framework for performance, scalability, maintainability, and reliability
• Align individual skilling with team and customer success goals
• Share expertise, contribute to IP creation and reuse, and accelerate customer outcomes
• Lead Architectural Design Sessions to define solution implementation plans aligned with customer business objectives and technical environments, achieving consensus on design and next steps toward production
• Collaborate and orchestrate with cross-functional teams to develop complex, end-to-end enterprise solutions using the Microsoft Security platform
• Modify and deliver existing IP or create new content as needed
• Embody our culture and values

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR equivalent experience
• This position is not eligible for visa sponsorship. Candidates must have authorization to work in the United States that does not now or in the future require employer sponsorship
• Strong understanding of data security principles, including data classification, encryption, sensitivity labeling, and information protection policies
• Deep knowledge of On-Prem Active Directory and Microsoft Entra ID
• Proven experience delivering end-to-end Data Security projects using enterprise platforms
• Microsoft Purview experience preferred (Information Protection, Data Loss Prevention, Insider Risk Management)
• Microsoft Security certifications such as SC-401, SC-200, SC-100, AZ-500
• Microsoft Certified Trainer or equivalent
• Industry-recognized certifications such as CISSP or equivalent
• Hands-on experience with Data Loss Prevention (DLP), Microsoft Information Protection (MIP), sensitivity labels, Insider Risk Management (IRM), eDiscovery, Audit, Communication Compliance, and Data Lifecycle Management
• Strong understanding of risk and compliance posture management
• Proficiency with Microsoft Defender Suite (Endpoint, Identity, Office 365) and incident response workflows
• Experience integrating Microsoft Defender with Microsoft Sentinel for advanced threat detection
• Deep knowledge of Microsoft Entra ID (Azure AD), including RBAC, Conditional Access, authentication models (PTA/PHS, Federation), Privileged Identity Management (PIM), and governance features
• Familiarity with Self-Service Password Reset (SSPR) and Verified ID
• Understanding of Zero Trust principles, security baselines, system hardening, and compromise recovery strategies
• Knowledge of privileged administrative workstation concepts and password policy best practices
• Experience with IPv4/IPv6 fundamentals, AD-integrated DNS, Windows Firewall configuration, and hybrid device management (AADJ)
• Expertise in Azure Security Center, Microsoft Sentinel, and event/audit policy tuning
• Foundational knowledge of Microsoft Graph API for security automation

Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field AND 8+ years of experience in cloud/infrastructure technologies, IT consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR Master’s degree in Computer Science, Information Technology, Engineering, Business, or related field AND 6+ years of experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting