- Lead discovery, requirements analysis, architecture, and solution-design activities across Microsoft Defender XDR and Microsoft Purview.
- Design integrated Microsoft Defender XDR solutions covering Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Defender for Cloud Apps.
- Design Microsoft Purview solutions covering Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Lifecycle Management, Records Management, eDiscovery, and Audit.
- Translate business, cybersecurity, privacy, legal, data-protection, and regulatory requirements into implementation-ready Microsoft security and compliance designs.
- Prepare high-level designs, detailed designs, architecture diagrams, configuration standards, policy mappings, implementation guides, and Architecture Decision Records.
- Lead architecture workshops, technical design sessions, design reviews, implementation walkthroughs, and architecture-governance discussions.
- Provide architectural guidance to engineering and implementation teams throughout pilot, validation, phased deployment, and production rollout activities.
- Review implementation evidence and validate that Microsoft Defender XDR and Microsoft Purview configurations align with approved designs.
- Develop architecture principles and policy-design standards that support consistent implementation across business units, countries, and technology environments.
Skills and experiences
Required technical skills
- 10 to 12+ years of experience in cybersecurity architecture, Microsoft security consulting, solution architecture, or enterprise security delivery.
- Strong hands-on experience with both Microsoft Defender and Microsoft Purview.
- Strong knowledge of Defender XDR, Defender for Endpoint, Defender for Cloud Apps, Microsft Purview Specifically.
- Strong experience designing Microsoft Defender for Endpoint architecture, including endpoint onboarding, endpoint security policies, endpoint detection and response, antivirus, attack surface reduction, device control, web protection, and security settings management.
- Experience designing Microsoft Defender for Cloud Apps architecture, including cloud discovery, application governance, session controls, Conditional Access App Control, activity policies, and SaaS application protection.
- Strong experience designing Microsoft Purview Information Protection solutions, including data classification, sensitive information types, trainable classifiers, sensitivity labels, auto-labelling, encryption, and content marking.
- Experience leading delivery from discovery and design through pilot, rollout, go-live.
- Strong understanding of Zero Trust architecture and its application across identities, endpoints, email, applications, collaboration services, and enterprise data.
- Ability to evaluate technical decisions, platform limitations, security risks, compliance risks, dependencies, and scope in complex enterprise environments.