Microsoft Data Security Architect

$92,000 - $158,000/Yr

BDO - Denver, CO

Full-time - Mid Level

Denver, CO

Professional, Scientific, and Technical Services

About the position

The Microsoft Compliance and Privacy Architect plays a pivotal role in leading the implementation of complex Microsoft 365, Microsoft Compliance, and Microsoft Priva solutions. This position requires a deep understanding of customer business goals, particularly in hybrid and cloud-based environments, to achieve compliance, security, and privacy outcomes. The architect will analyze and design solutions that align with these goals, ensuring that the best approaches are identified and implemented to meet client needs effectively. In this role, the architect will be responsible for designing, presenting, troubleshooting, and implementing cloud infrastructure compliance and privacy solutions specifically tailored for Microsoft 365 and Microsoft Azure products. This includes creating integrations for security and compliance, leading small project teams, and collaborating across geographies to deliver comprehensive Microsoft 365 security and compliance implementations. The architect will also engage in advanced troubleshooting of various Microsoft security products, ensuring that they work seamlessly together to achieve the desired data protection and compliance outcomes for customers. The position requires a proactive approach to assessing customer configurations against their requirements, recommending enhancements, and optimizing existing setups. The architect will also integrate Microsoft technologies into customer security operations and logging platforms, ensuring that all tools are configured correctly to support necessary protection and policies. Effective communication with clients and project leads is essential, as is the ability to coach and guide junior team members. The role may also involve providing administration and configuration support for Microsoft Purview and Microsoft Priva as needed, along with other duties as required.

Responsibilities

• Designs, presents, troubleshoots, and implements cloud infrastructure compliance and/or privacy solutions for architecture within Microsoft 365 and Microsoft Azure products.
• Designs, documents and creates Microsoft 365 solution integrations for security and compliance.
• Leads small project teams and/or works across geographies with solution teams to create a holistic Microsoft 365 security and/or compliance implementation for a customer.
• Leads advanced troubleshooting on Enterprise Mobility + Security (EMS), Microsoft Purview, Microsoft Priva deployment and integration.
• Identifies, troubleshoots, and configures where multiple Microsoft 365 products interact, such as Microsoft Teams, Microsoft Exchange, Microsoft Purview, and Microsoft Priva to create a customer's intended data protection and/or compliance outcome.
• Assesses a customer's Microsoft 365, Microsoft Purview, Defender for Endpoint and/or Defender for Cloud Apps configuration against customer requirements and recommends enhancement or optimization opportunities.
• Integrates customer Microsoft 365, Microsoft Purview, Microsoft Priva and other associated technologies to customer security operations and/or logging platforms.
• Configures and troubleshoots integrated tools such as Microsoft Defender for Cloud Apps or Microsoft Defender for Endpoint to consume and/or contribute necessary protection and/or policies for customer outcomes.
• Communicates with clients and project leads in a highly professional and timely manner.
• Coaches and provides technical guidance to junior team members.
• Provides administration and configuration support for Microsoft Purview and/or Microsoft Priva, and associated cloud or on-premises systems and products as a limited duration project, as needed.
• Other duties as required.

Requirements

• High school diploma required; Bachelor's degree preferred.
• Four (4) or more years of technical infrastructure implementation experience with increasing responsibility within Microsoft 365 Cloud Solutions required.
• Three (3) or more years of experience in cloud and/or on-premises infrastructure security or with endpoint data loss prevention and/or endpoint security products required.
• Experienced in one (1) or more of the following: Design, Deployment, and Management of Endpoint Security Controls; Managing Endpoint Security technologies like Microsoft Defender for Endpoint; Managing security of Cloud workload environments in Microsoft Azure; Designing and deploying security and compliance for Microsoft 365 and/or Microsoft Azure cloud migrations; Designing data governance rules and/or policies implemented in one or more technical products.
• Four (4) or more years of experience in an advanced engineering role implementing Microsoft security and compliance components such as Data Loss Prevention, Microsoft 365 compliance, and/or Microsoft 365 security products preferred.
• Experience implementing technical safeguards for a major regulatory compliance obligation (SOX, PCI, HIPAA, CCPA, GDPR or similar) strongly preferred.
• Experience with information technology architecture and design preferred.
• Client facing consulting experience preferred.

Nice-to-haves

• Certification on Microsoft 365 security and/or compliance preferred.
• Intermediate experience with Microsoft security products for Microsoft 365 and/or Microsoft Azure preferred.
• Microsoft Defender for Cloud Apps / Microsoft Cloud App Security, or another major industry CASB platform preferred.
• Microsoft Records Management and/or Information Governance processes preferred.
• Advanced knowledge of Microsoft 365 and Azure products for security, governance and data protection preferred.

Benefits

• Employee Stock Ownership Plan (ESOP) allowing participants a stake in the firm's success through beneficial ownership.
• Comprehensive compensation and Total Rewards benefits offerings.
• Opportunities for advancement and flexibility in work arrangements.