AMBG - Cloud Security & Exposure Management Architect

Avanade is looking for an experienced Cloud Security & Exposure Management Architect to join our security practice. This is a client-facing role where you will be engaged in some of the most exciting, complex, and leading-edge projects. You will help clients improve their cloud security and exposure management maturity by identifying, prioritising, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches.

You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture inputs for enterprise clients, with a focus on cloud security, exposure management, and Microsoft Security-led transformation.

Qualifications

• Advanced Microsoft Security Certifications such as: SC-100, SC-200, SC-300, SC-400, SC-900.
• Industry-recognised certifications such as: CISSP, CCSP, CISM, SANS.
• Microsoft Security and Exposure Management: Build strong knowledge of Microsoft Security tools such as Defender for Cloud, Microsoft Sentinel, Defender XDR, Security Copilot, Entra ID, and Exposure Management capabilities to help clients identify, prioritise, and reduce security risks across cloud and hybrid environments.
• Cloud Security and Exposure Architecture: Support the design and implementation of secure cloud architectures, exposure management approaches, and remediation patterns that improve security posture and align to industry standards.
• RFP Responses: Support responses to RFPs related to cloud security, exposure management.

Additional Information

All employment decisions shall be made without regard to age, race, creed, colour, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Avanade is committed to providing veteran employment opportunities to our service men and women.

As you bring your skills and abilities to Avanade, you’ll get distinctive experiences, limitless learning, and ambitious growth in return. As we continue to build our diverse and inclusive culture, we become even more innovative and creative, helping us better serve our clients and communities. You’ll join a community of smart, supportive collaborators to lift, mentor, and guide you, and to lean on your expertise.

Core to the Role

• Assess the resiliency posture of customer environments from both technical and operational perspectives.
• Evaluate disaster recovery (DR) plans, business continuity (BC) strategies, and Major Incident Response Plans (MIRPs).
• Conduct in-depth analysis of cloud infrastructure, application dependencies, observability, and failover capabilities.
• Review and enhance incident response plans including escalation protocols, communication plans, and recovery sequencing.
• Identify risks, vulnerabilities, and single points of failure across workloads and operational processes.
• Recommend improvements aligned with Azure Well-Architected Framework, SRE principles, and ITIL practices.
• Engage customer stakeholders to understand RTO/RPO objectives and recovery workflows.
• Produce professional documentation outlining findings, risks, and recommended improvements.

About You

You are an experienced Cloud Resiliency Engineer with strong expertise in Azure architecture, disaster recovery, and business continuity. You have a proven ability to assess complex environments, identify risks, and deliver clear, actionable recommendations to both technical and executive stakeholders.

Professional Skillset

• Deep experience with high availability and disaster recovery design in Microsoft Azure.
• Strong understanding of Azure architecture including availability zones, backup, recovery, and monitoring services.
• Familiarity with cloud-native resiliency patterns and site reliability engineering (SRE) practices.
• Experience designing and assessing Major Incident Response Plans (MIRPs).
• Experience in business continuity planning and operational resilience.
• Strong communication and documentation skills across technical and business stakeholders.

Key Responsibilities

• Partner with enterprise clients to define cloud strategy, roadmap, and transformation initiatives.
• Translate business needs into scalable Azure solutions aligned to Microsoft best practices.
• Facilitate architecture workshops, design reviews, and executive-level discussions.
• Architect secure, scalable, and resilient Azure platforms across IaaS, PaaS, and cloud-native services.
• Design Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF) covering governance, security, and compliance.
• Guide teams on adopting modern cloud-native patterns (microservices, containers, serverless).
• Ensure solutions comply with Azure Well-Architected Framework principles (security, reliability, performance, and cost optimisation).
• Conduct architecture assessments and optimisation reviews.
• Implement Infrastructure as Code (IaC) using Terraform.
• Build automated pipelines for continuous integration, deployment, and governance.
• Define enterprise-scale Azure governance models (RBAC, Policies, Management Groups).
• Implement security and compliance frameworks using Microsoft-native tools.
• Establish monitoring, observability, and operational excellence practices.

Delivery & Leadership

• Lead and mentor cross-functional engineering teams.
• Ensure end-to-end solution delivery quality, scalability, and business alignment.
• Drive best practices, reusable assets, and accelerators.