Cyber - Data Protection Microsoft Architect - Senior - Consulting

EY•Hartford, DC

6d•$104,800 - $218,500•Remote

About The Position

In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on protecting information, enabling responsible data use, and managing risk. As a Senior within the Data Protection and Privacy team, you will serve as a junior Microsoft architect with primary expertise in Microsoft Purview and broader working knowledge across the Microsoft Security stack. You will help clients translate business, legal, privacy, regulatory, and security requirements into practical architecture, governance, and implementation approaches. This role is designed for a senior-level consulting professional who can lead defined workstreams, facilitate client discussions, produce high-quality solution designs, and guide implementation teams while continuing to develop toward a lead architect role. You will work across data protection, privacy, security, identity, endpoint, cloud, analytics, and AI governance stakeholders in complex enterprise environments.

Requirements

A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Data Science, Privacy, or a related field, or equivalent relevant experience.
Approximately 3-6 years of relevant experience in cybersecurity, data protection, privacy, compliance, cloud security, information governance, or related technology consulting.
Hands-on experience with Microsoft Purview, with depth in two or more areas such as Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, eDiscovery, Audit, Data Map, Data Catalog, or Data Security Posture Management.
Experience gathering requirements and translating them into architecture, solution design, configuration, testing, deployment, and operating model considerations.
Working knowledge of at least two additional Microsoft technologies, such as Microsoft Defender, Intune, Sentinel, Entra, Azure security services, Fabric, or Microsoft 365.
Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation.
Experience supporting projects in large or complex enterprise environments with multiple business, legal, privacy, security, data, and technology stakeholders.
Understanding of security and privacy frameworks or regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
Ability to travel as required by client and engagement needs.

Nice To Haves

Microsoft certifications such as SC-400, SC-401, SC-100, SC-200, AZ-500, MS-102, or a demonstrated plan to obtain relevant certifications.
Experience with Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Intune, Sentinel, Entra ID, Azure Policy, Azure security services, or Microsoft Fabric.
Experience with data discovery, classification, catalog, privacy management, DLP, DSPM, cloud security, SIEM, identity, or endpoint security technologies outside the Microsoft ecosystem.
Experience developing data protection, privacy, AI governance, Zero Trust, cloud security, or enterprise security architecture deliverables.
Experience integrating Microsoft technologies with ticketing, data governance, analytics, cloud, or third-party security platforms.
Ability to develop PowerPoint presentations and Visio or equivalent architecture diagrams that communicate complex topics to executive, business, and technical audiences.
Proficiency with consulting engagement methods, work planning, estimation, status reporting, risk management, and quality review.
Experience mentoring junior resources and coordinating work across technical and functional teams.

Responsibilities

Lead defined Microsoft Purview workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
Design and support Microsoft Purview capabilities such as Information Protection, sensitivity labeling, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, Audit, Data Map, Data Catalog, and Data Security Posture Management.
Develop data classification, information protection, retention, DLP, insider risk, and data governance strategies that align to business objectives and legal, privacy, regulatory, and security requirements.
Support security and privacy assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, operating models, and governance frameworks.
Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, records, data governance, technology, and business teams.
Translate business and control requirements into solution architectures, design decisions, implementation backlogs, user stories, test scenarios, and measurable outcomes.
Create clear architecture diagrams, reference patterns, configuration standards, decision papers, executive presentations, and technical implementation guidance.
Support integration of Microsoft Purview with Microsoft Defender, Intune, Sentinel, Entra, Azure, Fabric, Microsoft 365, and related data and security services.
Contribute to data security and AI governance initiatives, including protection of sensitive data used by Microsoft 365 Copilot, generative AI solutions, analytics platforms, and enterprise applications.
Provide technical direction to implementation resources, review deliverables for quality, identify risks and dependencies, and escalate design decisions when appropriate.
Mentor junior team members, contribute reusable assets and delivery methods, and support proposal development and solution shaping for Data Protection and Privacy opportunities.
Maintain awareness of Microsoft product developments, industry standards, privacy requirements, and emerging data security and AI risks.