Security Solution Architect

Security Solution Architect - Microsoft Security

Do you combine deep Microsoft security expertise with architectural judgement to turn complex requirements into secure, scalable and supportable solutions? As Security Solution Architect – Microsoft Security, part of our Security & Networking Architecture team, you are a senior, customer-facing technical authority for the Microsoft security domain. You own solution architecture and design authority from discovery through delivery, translating business, risk and security requirements into integrated architectures across Microsoft 365, Azure and hybrid environments. Your scope spans Microsoft Entra, Microsoft Defender, Microsoft Sentinel and Microsoft Purview. You collaborate closely with the Cegeka Modern SOC, which supports the Microsoft security stack. You work directly on customer engagements and provide specialist architecture expertise to opportunities led by the Solution Pre-Sales team.

• You lead customer discovery, architecture workshops and technical decision forums to assess Microsoft security maturity and clarify requirements, constraints, dependencies and risks.
• Design integrated Zero Trust architectures using Microsoft Entra, Defender, Sentinel and Purview, with Intune and Azure networking controls where relevant.
• Act as design authority for Microsoft security solutions: define high-level designs, integration patterns and security standards; review solution artefacts; and govern exceptions, technical debt and architectural trade-offs.
• Guide engineering and project teams through implementation and migration. Validate detailed designs, configuration baselines and runbooks. Agree onboarding and acceptance criteria with the Cegeka Modern SOC, including detection and response workflows, access and escalation paths, and confirm readiness for operational handover.
• Address security, integration and operational risks through least privilege, identity governance, segmentation, data protection and resilience. Define telemetry, automation and integration requirements with the Cegeka Modern SOC across Microsoft and third-party platforms, with clear ownership of control management and incident response.
• Provide validated Microsoft security architecture inputs to the Solution Pre-Sales team, including solution options, licensing prerequisites, consumption and delivery estimates, assumptions, dependencies and risks.
• Partner with Product Management and the Cegeka Modern SOC to evolve Microsoft security services, reference architectures, blueprints and costing models. Use operational feedback and incident lessons to improve designs and translate platform developments into supportable customer propositions.
• Maintain reusable Microsoft security architecture assets, coach colleagues and contribute to Microsoft technology-partner relationships. Evaluate emerging capabilities, including AI security, against customer needs and operational constraints.

What you need to succeed:

• Substantial experience designing and delivering enterprise Microsoft security solutions, with senior-level architectural credibility and the ability to lead customer-facing technical discussions.
• Deep hands-on expertise in at least one Microsoft security pillar—Entra identity and access, Defender threat protection, Sentinel security operations, Defender for Cloud, or Purview data security—with architectural understanding across the wider portfolio.
• Strong understanding of Microsoft 365, Azure, endpoint management with Intune, networking and workload security, including integration with non-Microsoft technologies.
• Experience collaborating with SOC and managed services teams on monitoring, response, onboarding and operational handover.
• Demonstrated ability to translate requirements into integrated high-level designs, govern technical decisions and review detailed designs, migration plans, security baselines and operational documentation. Practical familiarity with KQL, PowerShell or infrastructure-as-code is an asset.
• Experience supporting dedicated presales teams with Microsoft security solution options, licensing and consumption considerations, effort and cost inputs, dependencies and risks.
• You can explain technical trade-offs to both technical and business stakeholders.
• Strong architectural thinking, technical leadership, consulting, communication and collaboration skills. You balance Microsoft platform capabilities with customer risk, existing investments, commercial constraints and supportability.
• Excellent written and spoken English; additional languages are an asset.
• Microsoft security certifications or equivalent demonstrable expertise.
• Relevant higher education or equivalent professional experience in cybersecurity, computer science, engineering, infrastructure or arc