This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Microsoft Federal is seeking individuals passionate about advancing cybersecurity readiness through immersive, hands-on exercises that strengthen operational resilience for U.S. Federal agencies. Ideal candidates for this role will demonstrate technical expertise, strong facilitation skills, and a commitment to driving measurable security outcomes. As a Security Cloud Solution Architect (L61) focused on Cyber Exercises, you will support the planning, facilitation, and delivery of immersive cybersecurity exercises for U.S. Federal customers. Working alongside senior CSAs, you will help design scenarios, operationalize technical solutions, and drive measurable security outcomes through hands-on engagement and collaboration.
Job Responsibility:
Deliver Cyber Exercises: Assist in planning, coordinating, and executing immersive cyber exercises that simulate real-world attack scenarios
Support facilitation of blue, red, and purple team activities, ensuring alignment with customer mission objectives and operational goals
Capture observations, lessons learned, and performance metrics for after-action reviews and improvement planning
Technical Enablement: Support the setup and maintenance of cyber range environments leveraging Microsoft Azure and Microsoft 365 security capabilities
Facilitate the integration of identity, endpoint, and cloud protection technologies into exercise environments to simulate realistic adversary tactics
Contribute to development of reusable technical assets such as scripts, templates, and telemetry configurations
Drive Business Outcomes: Align exercise delivery with strategic customer objectives to accelerate adoption of Microsoft security tools and services
Collaborate with Microsoft sales, engineering, and account teams to track metrics for impact, usage, and return on investment
Design Realistic Scenarios: Assist in researching and developing exercise scenarios based on emerging threats and current adversary tactics, techniques, and procedures (TTPs)
Tailor scenario selection to customer-specific training objectives and operational priorities
Incorporate modern topics such as AI-enabled threats or hybrid-cloud attack surfaces under guidance from senior architects
Collaboration & Learning: Work closely with senior Cloud Solution Architects and security specialists to deliver exercises and improve processes
Participate in regular team knowledge-sharing sessions to build technical and operational expertise
Continuously learn Microsoft’s security tools and cloud technologies to enhance future exercise planning and delivery
Requirements:
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 2+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR equivalent experience
Active U.S. Government Top Secret Security Clearance
Verification of U.S. citizenship
Ability to pass Microsoft Cloud background check
Willingness to travel 50-75%
Nice to have:
Foundational Security Knowledge: Understanding of core cybersecurity concepts such as incident response, threat hunting, and SOC workflows
Familiarity with U.S. Federal security standards and frameworks (e.g., NIST, MITRE ATT&CK)
Awareness of cloud security principles and shared responsibility models
Exercise Planning & Facilitation Skills: Experience assisting with cyber exercises, tabletop drills, or security workshops OR strong interest in developing these skills
Ability to coordinate logistics, manage agendas, and capture observations for after-action reporting
Technical Exposure (Hands-On or Conceptual): Basic experience with Microsoft security solutions (Microsoft Defender XDR, Microsoft Sentinel, Entra ID) or similar enterprise security tools
Familiarity with scripting or automation concepts (e.g., PowerShell, Python) for repeatable tasks is a plus
Understanding of networking and system fundamentals to help analyze logs or telemetry data
Communication & Collaboration: Strong written and verbal communication skills for summarizing technical findings and supporting customer-facing deliverables
Ability to work effectively in cross-functional teams including security, compliance, engineering, and business stakeholders
Certifications (Preferred, Not Required): Microsoft Security Fundamentals (SC-900) or Microsoft 365 Fundamentals (MS-900)
Associate-level certifications such as SC-200 (Security Operations Analyst) or AZ-500 (Azure Security Engineer) are a plus
Industry certifications like Security+ or GCIH are desirable but not mandatory
Experience Level: 1–3 years in cybersecurity, IT operations, or related role OR equivalent academic/project experience
Demonstrated interest in cyber exercises, incident response, or cloud security architecture