Security Architect – Entra ID, MS, Azure

• Establish and maintain security architecture principles, patterns, standards and control requirements
• Define security design-assurance criteria and assess technical designs against agreed requirements
• Assess threats, risks, vulnerabilities and control gaps across current, coexistence, transition and target states
• Develop security controls for coexistence between existing environments and new target services
• Define and assure Zero Trust principles across identity, devices, applications, data and network access
• Establish security patterns for identity protection, privileged access, least privilege, Conditional Access and administrative boundaries
• Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures
• Establish requirements for logging, monitoring, alerting, threat detection and incident response
• Review technical architectures and solution designs for security weaknesses, gaps and dependencies
• Assess migration strategies and cutover approaches from a security perspective
• Review security exceptions and deviations, documenting residual risk, compensating controls and treatments
• Maintain visibility of significant security risks, owners and mitigation plans
• Develop practical remediation and risk-treatment approaches with technical teams
• Incorporate security requirements into programme plans, designs, migration patterns, testing and operational handover
• Support security testing and assurance before migrations and go-live decisions
• Provide security input into operational readiness and production transition
• Align designs with security policies, information-security standards, data-protection obligations and regulatory requirements
• Maintain HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records
• Provide risk-based security recommendations to programme leadership and senior stakeholders
• Support continuous improvement of security controls throughout the transformation

Requirements

• Extensive experience working as a Security Architect across complex enterprise technology environments
• Strong technical knowledge of Microsoft Entra ID, Microsoft 365, Azure, endpoint security, networks and application security
• Strong understanding of hybrid and cloud security architectures and legacy-environment transitions
• Proven experience applying Zero Trust, least privilege, privileged access and defence-in-depth principles
• Strong knowledge of identity and access security, including authentication, Conditional Access, identity protection and administrative controls
• Experience designing security controls across endpoints, email, data, applications, infrastructure and networks
• Strong understanding of security logging, monitoring, threat detection and incident-response requirements
• Experience in threat modelling, security risk assessment, control mapping and architecture assurance
• Experience assessing security risks associated with migration, coexistence, cutover and transition activities
• Understanding of data protection, information governance and relevant regulatory or assurance requirements
• Experience reviewing security exceptions and developing risk-treatment or compensating-control strategies
• Strong technical writing skills and experience producing security architecture documentation, risk assessments, threat models, control matrices and design-assurance outputs
• Experience working within formal architecture and security-governance frameworks
• Ability to translate technical security risks into clear business impacts, choices and recommendations

Core Competencies

Demonstrates extensive experience as a Security Architect with a strong focus on Microsoft Entra ID, Microsoft 365, Azure, and hybrid cloud security architectures. Proficient in applying Zero Trust principles, developing security controls, and conducting risk assessments within complex enterprise environments.

Highest-signal resume keywords

• Security Architecture Principles
• Zero Trust Implementation
• Microsoft Entra ID
• Threat Modelling
• Security Risk Assessment

ATS Optimization Keywords

Hard Skills

• Security Design Assurance
• Endpoint Security
• Application Security
• Identity Protection
• Conditional Access
• Threat Detection
• Incident Response
• Control Mapping
• Risk Treatment
• Security Documentation

Soft Skills

• Technical Writing
• Communication

Industry Keywords

• Data Protection
• Information Governance
• Regulatory Requirements
• Hybrid Security Architectures
• Legacy Environment Transitions

Tools & Technologies

• Microsoft 365
• Azure
• Security Governance Frameworks