Microsoft 365 Security Architect

TCS•Ann Arbor, MI

About The Position

We are seeking an experienced Microsoft 365 Security Architect with 8–10 years of Cyber Security experience and deep expertise in Microsoft 365 Security, Microsoft Defender, Microsoft Purview, and Zero Trust architecture. The ideal candidate will lead the design, implementation, and continuous improvement of enterprise Microsoft 365 security solutions, ensuring the protection of users, endpoints, identities, email, and sensitive organizational data. The candidate will work closely with Security Operations, Infrastructure, Identity & Access Management, Compliance, and Cloud Engineering teams to develop and implement enterprise-wide security strategies aligned with Microsoft's security best practices.

Requirements

8–10 Years of Cyber Security experience.
Minimum 5+ years of hands-on Microsoft 365 Security experience.
Experience designing and implementing enterprise Microsoft Security solutions.
Microsoft Security
Microsoft 365 Security
Microsoft Defender Suite
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Microsoft Defender for Identity
Microsoft Defender for Cloud Apps
Identity & Access Management
Microsoft Entra ID (Azure AD)
Conditional Access
Multi-Factor Authentication (MFA)
Privileged Identity Management (PIM)
Identity Protection
Identity Governance
Data Security
Microsoft Purview
Data Loss Prevention (DLP)
Sensitivity Labels
Information Protection
Data Classification
Compliance Manager
eDiscovery
Security Operations
Microsoft Sentinel
Security Incident Response
Threat Hunting
Threat Protection
Security Monitoring
Security Operations Center (SOC)
Endpoint Security
Microsoft Intune
Endpoint Manager
Device Compliance
Endpoint Protection
Security Architecture
Zero Trust Architecture
Microsoft Security Best Practices
Enterprise Security Architecture
Risk Assessment
Security Governance
Bachelor's degree in Computer Science, Information Security, Cyber Security, or related field.
8–10 years of Cyber Security experience.
Strong Microsoft 365 Security architecture experience.
Hands-on expertise with Defender, Purview, Entra ID, Intune, and Sentinel.
Experience implementing Zero Trust security models.
Excellent troubleshooting and incident response skills.
Strong communication and stakeholder management skills.

Nice To Haves

Microsoft Defender XDR
Azure Security Center
Microsoft Defender for Cloud
Microsoft Secure Score
Cloud Security
SIEM/SOAR
PowerShell Automation
Azure Automation
Microsoft Graph API
Compliance & Regulatory Frameworks (ISO 27001, NIST, CIS)

Responsibilities

Design and implement enterprise Microsoft 365 Security architecture.
Secure Microsoft 365 services including Exchange Online, SharePoint Online, Teams, OneDrive, and Entra ID.
Design and implement Zero Trust Security Architecture across Microsoft cloud environments.
Configure and manage Microsoft Entra ID (Azure AD) including: Multi-Factor Authentication (MFA), Conditional Access Policies, Identity Protection, Privileged Identity Management (PIM), Identity Governance.
Implement and manage Microsoft Defender solutions: Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps.
Configure and maintain Microsoft Purview solutions: Data Loss Prevention (DLP), Sensitivity Labels, Information Protection, Data Classification, Insider Risk Management, Compliance Manager, eDiscovery.
Monitor, investigate, and respond to security incidents using Microsoft Sentinel.
Develop security baselines and governance policies aligned with Microsoft security frameworks.
Secure endpoints using Microsoft Intune and Endpoint Manager.
Perform threat detection, incident response, vulnerability assessments, and remediation.
Collaborate with SOC, IAM, Infrastructure, and Compliance teams to improve the organization's security posture.
Conduct security assessments and recommend improvements based on Microsoft best practices.
Create architecture documentation, security standards, and operational procedures.
Stay updated on emerging Microsoft security technologies and cyber threats.