Lead Security Architect (Micrsoft Defender XDR & Purview)

Key Responsibilities:

• Oversee the discovery, requirements analysis, architecture, and solution design processes for Microsoft Defender XDR and Microsoft Purview.
• Craft integrated solutions for Microsoft Defender XDR, which includes Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Defender for Cloud Apps.
• Devise Microsoft Purview solutions encompassing Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Lifecycle Management, Records Management, eDiscovery, and Audit.
• Convert business, cybersecurity, privacy, legal, data protection, and regulatory requirements into actionable Microsoft security and compliance designs.
• Create high-level designs, detailed designs, architecture diagrams, configuration standards, policy mappings, implementation guides, and Architecture Decision Records.
• Facilitate architecture workshops, technical design sessions, design reviews, implementation walkthroughs, and governance discussions.
• Offer architectural guidance to engineering and implementation teams throughout pilot, validation, phased deployment, and production rollout phases.
• Examine implementation evidence to ensure Microsoft Defender XDR and Microsoft Purview configurations are in accordance with approved designs.
• Establish architecture principles and policy design standards that promote consistent implementation across various business units, countries, and technology environments.

Essential Technical Skills:

• 10 to 12+ years of experience in cybersecurity architecture, Microsoft security consulting, solution architecture, or enterprise security delivery.
• Extensive hands-on experience with Microsoft Defender and Microsoft Purview.
• Deep knowledge of Defender XDR, Defender for Endpoint, Defender for Cloud Apps, and Microsoft Purview.
• Proficient in designing Microsoft Defender for Endpoint architectures, which includes endpoint onboarding, security policies, detection and response, antivirus solutions, attack surface reduction, device control, web protection, and security settings management.
• Experience in creating Microsoft Defender for Cloud Apps architectures, covering cloud discovery, application governance, session controls, Conditional Access App Control, activity policies, and SaaS application protection.
• Strong experience in designing Microsoft Purview Information Protection solutions, including data classification, sensitive information types, trainable classifiers, sensitivity labels, auto-labeling, encryption, and content marking.
• Proven record of leading the delivery process from discovery and design through to pilot, rollout, and go-live phases.
• Solid understanding of Zero Trust architecture and its implementation across identities, endpoints, email, applications, collaboration services, and enterprise data.
• Capability to assess technical decisions, platform limitations, security risks, compliance risks, dependencies, and scope within intricate enterprise environments.

Qualifications:

• A Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline is preferred.
• Preferred Microsoft certifications include: SC-100, SC-200, AZ-500, SC-300, SC-401, AZ-305, MD-102.

Preferred Experience:

• Experience in delivering large-scale Microsoft Defender XDR and Microsoft Purview solutions for enterprise or regulated organizations.
• Expertise in designing integrated Defender XDR architectures across endpoints, identities, email, collaboration services, cloud applications, and security operations.
• Experience in deploying Microsoft Defender for Endpoint across extensive endpoint environments using pilot groups, deployment rings, validation criteria, and phased rollouts.
• Knowledge in designing Microsoft Purview controls for Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, supported endpoints, and cloud applications.
• Experience in producing high-level designs, detailed designs, architecture diagrams, security standards, configuration guides, policy mappings, and Architecture Decision Records.
• Collaboration with Security, Compliance, Legal, Risk, Identity, Endpoint, Messaging, SOC, and senior client stakeholders.
• Experience in supporting design reviews, production readiness, go-live, and knowledge transfer initiatives.
• Ability to deliver multi-country or multi-entity security transformation programs.
• Experience in banking, financial services, or other regulated industries.
• Familiarity with local practices and established stakeholder engagement capabilities in Malaysia is preferred.