Cloud Solution Architecture-Cloud Security

With over 17,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft's end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide differentiated and connected customer experience.

We are looking for a highly motivated and deeply technical Security Cloud Solution Architect (CSA) with broad experience across the Microsoft Security portfolio, including Defender XDR, Microsoft Entra, Microsoft Purview, and Security Copilot, combined with deep hands-on expertise in Microsoft Sentinel and Microsoft Defender for Cloud. The ideal candidate has designed, deployed, and operated these solutions in enterprise production environments and led complex SIEM modernization, cloud security, and customer transformation engagements from strategy and architecture through implementation, adoption, and operational excellence.

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related field, with 5+ years of relevant experience, or equivalent practical experience.

• Proven hands-on experience designing, deploying, and operating Microsoft Sentinel in enterprise environments, including security monitoring, detection engineering, automation, and large-scale SOC operations.

• Proven experience leading enterprise SIEM modernization and migrations to Microsoft Sentinel, including assessment, data onboarding, content migration, validation, parallel operations, and production cutover from legacy SIEM platforms.

• Proven hands-on experience implementing Microsoft Defender for Cloud, including CSPM, CWPP, cloud governance, workload protection, security posture management, and risk reduction across Azure and multi-cloud environments.

• Strong experience securing Azure Landing Zones and enterprise-scale cloud environments using Azure Policy, Management Groups, RBAC, Privileged Identity Management (PIM), and Zero Trust principles.

• Experience designing and securing Azure network architectures, including Azure Firewall, Firewall Manager, Web Application Firewall (WAF), DDoS Protection, Private Link, NSGs, ASGs, Virtual WAN, Secure Access Service Edge (SASE), and micro-segmentation.

• Experience working with large SOCs, GSOCs, MSSPs, or managed security operations organizations, driving SOC transformation, operational excellence, and security platform adoption.

• Broad expertise across the Microsoft Security portfolio, including Defender XDR, Microsoft Entra, Microsoft Purview, and Security Copilot, with the ability to integrate these technologies into a unified security architecture.

• Demonstrated success leading customer-facing engagements focused on SIEM transformation, cloud security, Zero Trust, SOC modernization, and enterprise security architecture.

• Strong knowledge of security operations disciplines, including threat hunting, detection engineering, security analytics, incident response, automation, and SOC maturity improvement.

• Experience securing AI-enabled environments, including AI security posture management, governance, data protection, observability, threat protection, and responsible AI controls.

• Strong automation and scripting skills using KQL, PowerShell, Python, Logic Apps, REST APIs, Microsoft Graph, and security orchestration technologies.

• Working knowledge of industry security frameworks and standards, including NIST, CIS, ISO 27001, and PCI DSS.

• Experience embedding security into DevSecOps, CI/CD, and platform engineering practices while collaborating effectively with engineering teams, MSSPs, partners, and operational security stakeholders.