Cloud Solution Architect - Cloud Security

About the Role

Join the Microsoft Customer Experience & Success (CE&S) team, a global organization with over 17,000 employees dedicated to delivering a comprehensive and innovative customer experience. As a Security Cloud Solution Architect, you will leverage extensive expertise across the Microsoft Security portfolio, including Defender XDR, Microsoft Entra, Microsoft Purview, Security Copilot, Microsoft Sentinel, and Microsoft Defender for Cloud. This role involves designing, deploying, and managing these solutions in enterprise settings while leading intricate SIEM modernization and cloud security projects from strategic planning to successful operations.

Key Responsibilities

• Act as a trusted advisor by spearheading security strategies, architectures, and modernization efforts with a focus on Microsoft Sentinel and Defender for Cloud, collaborating with CISOs and security teams to implement scalable SecOps, Identity, Cloud, Data, and AI Security solutions.
• Design, deploy, and manage Microsoft Sentinel environments, including workspace setup, multi-tenant architectures, connector integrations, detection engineering using KQL, incident handling workflows, UEBA, threat intelligence, hunting, and automation with Logic Apps.
• Promote and lead adoption of Microsoft Defender for Cloud’s CSPM and CWPP functionalities covering servers, containers, Kubernetes, databases, storage, applications, APIs, and AI workloads.
• Oversee SIEM modernization initiatives, including migrating from legacy platforms to Microsoft Sentinel through assessment, data onboarding, content migration, validation, and seamless production transition.
• Support customers in securing AI workloads implementing AI-enhanced detection, investigation, response, governance, and protection tactics leveraging Security Copilot and related security technologies.
• Drive technical consumption and operational health by managing onboarding, cost governance, retention strategies, and continuous optimization to enhance detection, automation, security, and overall platform health.
• Develop unified security architectures integrating Microsoft Sentinel and Defender for Cloud with Defender XDR, Microsoft Entra, Microsoft Purview, Security Copilot, and other Azure security services.
• Lead workshops, design reviews, proofs of concept, and enablement sessions to accelerate customer adoption and success.
• Collaborate with engineering teams to highlight product gaps, provide customer feedback, and create reusable guidance and best practices.
• Partner with sales, services, and partners to translate architectural decisions into fully operational security solutions.

Qualifications

• Bachelor’s degree in Computer Science, IT, Engineering, Cybersecurity, or a related field, or equivalent professional experience with a minimum of 5 years in relevant roles.
• In-depth experience designing, deploying, and operating Microsoft Sentinel at enterprise scale, including monitoring, detection engineering, automation, and SOC operations.
• Proven leadership in enterprise SIEM modernization and migration efforts with comprehensive understanding from assessment to cutover.
• Hands-on expertise with Microsoft Defender for Cloud covering CSPM, CWPP, governance, workload protection, and multi-cloud security.
• Strong skills implementing and securing Azure enterprise environments using Azure Policy, Management Groups, RBAC, PIM, and Zero Trust principles.
• Experience in Azure network security solutions such as Azure Firewall, Firewall Manager, WAF, DDoS Protection, Private Link, NSGs, ASGs, Virtual WAN, SASE, and micro-segmentation.
• Background collaborating with SOCs, GSOCs, MSSPs, or managed security organizations focusing on SOC transformation and platform adoption.
• Comprehensive knowledge across the Microsoft Security product ecosystem including Defender XDR, Microsoft Entra, Microsoft Purview, and Security Copilot with integration capabilities.
• Successful track record managing customer-facing projects in SIEM transformation, cloud security, Zero Trust, SOC upgrades, and enterprise security architectures.
• Expertise in security operations disciplines such as threat hunting, detection engineering, incident response, security analytics, and automation.
• Skills securing AI environments including posture management, governance, protection, and responsible AI controls.
• Proficiency in automation and scripting using KQL, PowerShell, Python, Logic Apps, REST APIs, Microsoft Graph, and orchestration tools.
• Familiarity with security standards such as NIST, CIS, ISO 27001, and PCI DSS.
• Experience integrating security into DevSecOps, CI/CD, and platform engineering practices with cross-functional collaboration.

Certifications Required and Preferred

• Mandatory: SC-200 (Microsoft Security Operations Analyst Associate), AZ-500 (Microsoft Azure Security Engineer Associate).
• Preferred: SC-100 (Microsoft Cybersecurity Architect Expert), SC-300 (Microsoft Identity and Access Administrator Associate), SC-900 (Microsoft Security, Compliance, and Identity Fundamentals), AI-900 (Microsoft Azure AI Fundamentals), CISSP, CCSP, GIAC, or equivalent industry certifications.

Diversity and Inclusion

Microsoft is committed to equal opportunity employment. Applicants are considered regardless of age, race, gender identity, disability, veteran status, or any legally protected characteristic. Reasonable accommodations are available for applicants with disabilities during the hiring process.