Director Security Architect

We are specifically looking for

Responsibilities

• Own end-to-end target security architecture across:
• Microsoft Entra ID
• Microsoft Defender
• Microsoft 365 Defender XDR
• Purview
• Define enterprise-wide standards for:
• Architecture
• Lead security architects, consultants, engineers, and project managers.
• Guide Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
• Review and approve:
• Configuration Baselines
• SOPs
• Runbooks
• Health
• Optimization Reports
• KPI Dashboards
• Lead architecture-focused knowledge transfer sessions.
• Develop reusable architecture assets and best practices.

Requirements

• 15+ years of cybersecurity experience.
• 8+ years in Enterprise Security Architecture roles.
• Proven experience leading large-scale enterprise security transformation programs.
• Strong hands-on expertise in Microsoft E5 Security and Microsoft Purview.
• Experience architecting and delivering implementations for 10,000+ endpoints/servers in multi-region environments.
• Experience managing leadership-level stakeholders, including CISOs, CIOs, Steering Committees, and Board Members.
• Ability to operate both at executive and hands-on technical levels.
• RBAC
• Zero
• XDR Correlation Models
• Data
• Security
• Must have experience leading migrations/consolidations from legacy security tools such as: CrowdStrike Checkpoint EDR Symantec DLP
• Sophos into Microsoft-native security platforms.
• Must have strong experience designing:
• Enterprise Sensitivity Label Taxonomy
• Data Governance Frameworks
• Information Protection Strategy
• DLP Control Frameworks
• Regulatory Compliance Controls
• Adaptive Protection Models
• Insider Risk Controls
• Troubleshooting critical production issues
• Resolving security configuration challenges
• Supporting stabilization and hypercare phases
• Acting as technical escalation point during complex deployments
• Candidate
• Acting as trusted advisor to CISOs and executive leadership.
• Leading board-level and steering committee discussions.
• Presenting architecture decisions and risk trade-offs.
• Managing scope, risk acceptance, escalations, and delivery challenges.
• Conducting workshops with Business Units and Compliance teams.
• Translating security architecture into business risk language.
• Wave-based deployment methodologies.
• Enterprise rollout governance.
• Hypercare and stabilization models.
• Stage-gate assessments.
• Architecture compliance reviews.
• Testing and validation sign-offs.
• Knowledge Transfer governance.
• Identity Security
• Entra
• Endpoint Security
• Microsoft Defender for Endpoint (MDE)
• Email Security
• Microsoft Defender for Office 365 (MDO)
• Cloud App Security
• MDCA / MCAS
• Identity Threat Detection
• MDI Extended Detection & Response
• Microsoft 365 Defender XDR
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• SC-200
• SC-300
• SC-400
• CISSP
• CISM
• TOGAF
• Experience within the
• Logistics
• Environments
• Critical
• OT/IT