Security Architect/Director - Entra ID/Microsoft Defender

We are specifically looking for a Director Security Architect.

Key Responsibilities

• Own end-to-end target security architecture across Microsoft Entra ID, Microsoft Defender, Microsoft 365 Defender XDR, and Microsoft Purview.
• Define enterprise-wide security architecture standards, frameworks, and best practices.
• Lead security architects, consultants, engineers, and project managers across Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
• Review and approve configuration baselines, SOPs, runbooks, health reports, optimization reports, and KPI dashboards.
• Architect and deliver security implementations across 10,000+ endpoints/servers in multi-region environments.
• Lead migrations and consolidations from legacy platforms including CrowdStrike, Check Point, Symantec DLP, and Sophos to Microsoft-native security platforms.
• Design RBAC, Zero Trust, XDR correlation models, identity security, and data security architectures.
• Develop Enterprise Sensitivity Label Taxonomy, Data Governance Frameworks, Information Protection Strategy, DLP Control Frameworks, Regulatory Compliance Controls, Adaptive Protection, and Insider Risk Controls.
• Lead architecture-focused knowledge transfer sessions and develop reusable architecture assets.
• Act as the technical escalation point for critical production issues, security configuration challenges, complex deployments, stabilization, and hypercare.
• Lead architecture workshops with business units, compliance teams, and technical stakeholders.
• Present architecture decisions, risks, and trade-offs to CISOs, CIOs, Steering Committees, and Board-level stakeholders.
• Manage scope, risk acceptance, escalations, and delivery challenges while translating security architecture into business-risk language.
• Establish governance around wave-based deployments, enterprise rollouts, stage-gate assessments, architecture compliance reviews, testing/validation sign-offs, and knowledge transfer.

Technical Expertise

• Identity Security : Microsoft Entra ID, RBAC, Zero Trust, Microsoft Defender for Identity (MDI).
• Endpoint Security : Microsoft Defender for Endpoint (MDE).
• Email Security : Microsoft Defender for Office 365 (MDO).
• Cloud Security : Microsoft Defender for Cloud / Microsoft Defender for Cloud Apps (MDCA/MCAS).
• XDR : Microsoft 365 Defender XDR and security correlation models.
• Data Security : Microsoft Purview, Sensitivity Labels, DLP, Information Protection, Insider Risk, Data Governance.
• Strong hands-on experience with Microsoft E5 Security and Microsoft Purview.

Requirements

• 15+ years of overall cybersecurity experience.
• 8+ years in Enterprise Security Architecture roles.
• Proven experience leading large-scale enterprise security transformation programs.
• Experience architecting and delivering security solutions across 10,000+ endpoints/servers in multi-region environments.
• Strong executive stakeholder management experience, including CISOs, CIOs, Steering Committees, and Board Members.
• Ability to operate at both executive/strategic and hands-on technical levels.
• Experience in Logistics environments with exposure to critical OT/IT environments is preferred/required.
• Strong troubleshooting and problem-solving skills for complex security deployments and production environments.

(ref:hirist.tech)