Microsoft Security Architect / Engineer

Experience: 6–10 Years

Budget: 1.2L-1.7L

JD:

Job Summary

We are seeking a highly skilled Microsoft Security Architect/Engineer to lead the implementation and governance of Microsoft Cloud Security controls for a specific client environment (~40 M365 users, single tenant). This role is focused on the implementation and governance phase of an engagement, following a completed discovery and audit phase. You will be responsible for executing security enhancements based on existing audit findings and ensuring robust governance across the client’s Microsoft ecosystem.

Key Responsibilities

In this role, you will be responsible for the configuration and implementation of Microsoft Defender for Cloud Apps (MDCA), including app connectors, OAuth governance, session controls, and activity policies. You will design and deploy comprehensive Conditional Access policies via Microsoft Entra ID, ensuring seamless SSO integration.

A critical part of your duties will involve implementing Microsoft Purview DLP policies, data classification schemes, and sensitivity labels. You will also build out SaaS Governance and AI Governance frameworks to protect the client’s digital assets. Your work must consistently align configurations with SOC 2 and PCI DSS v4 compliance requirements.

Furthermore, you will be expected to write detailed operational runbooks and documentation to facilitate a smooth client handoff and knowledge transfer. Where necessary, you will utilize PowerShell and the Microsoft Graph API for automation and reporting, focusing on light scripting to enhance operational efficiency.

Required Qualifications & Skills

To be considered for this position, you must have 6–10 years of relevant Microsoft Security experience. You should be comfortable working from third-party audit and discovery data, such as app inventories and risk prioritization lists, to drive implementation.

Preferred Certifications

We highly value candidates who hold the following certifications:

•SC-200: Microsoft Security Operations Analyst

•SC-300: Microsoft Identity and Access Administrator

•SC-400: Microsoft Information Protection Administrator

•SC-100: Microsoft Cybersecurity Architect (strongly preferred for Architect-level candidates)

Preferred Experience

•Prior experience in an MSP or System Integrator environment, particularly implementing Microsoft security solutions across multiple client tenants.

•Exposure to AI and Copilot governance considerations within the Microsoft 365 environment.

•Strong problem-solving skills and the ability to work independently to translate audit findings into technical reality.