Lead Security Architect (Micrsoft Defender XDR & Purview)

What you will do:

• Lead discovery, requirements analysis, architecture, and solution-design activities across Microsoft Defender XDR and Microsoft Purview.
• Design integrated Microsoft Defender XDR solutions covering Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Defender for Cloud Apps.
• Design Microsoft Purview solutions covering Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Lifecycle Management, Records Management, eDiscovery, and Audit.
• Translate business, cybersecurity, privacy, legal, data-protection, and regulatory requirements into implementation-ready Microsoft security and compliance designs.
• Prepare high-level designs, detailed designs, architecture diagrams, configuration standards, policy mappings, implementation guides, and Architecture Decision Records.
• Lead architecture workshops, technical design sessions, design reviews, implementation walkthroughs, and architecture-governance discussions.
• Provide architectural guidance to engineering and implementation teams throughout pilot, validation, phased deployment, and production rollout activities.
• Review implementation evidence and validate that Microsoft Defender XDR and Microsoft Purview configurations align with approved designs.
• Develop architecture principles and policy-design standards that support consistent implementation across business units, countries, and technology environments.

Required technical skills

• 10 to 12+ years of experience in cybersecurity architecture, Microsoft security consulting, solution architecture, or enterprise security delivery.
• Strong hands-on experience with both Microsoft Defender and Microsoft Purview.
• Strong knowledge of Defender XDR, Defender for Endpoint, Defender for Cloud Apps, Microsft Purview Specifically.
• Strong experience designing Microsoft Defender for Endpoint architecture, including endpoint onboarding, endpoint security policies, endpoint detection and response, antivirus, attack surface reduction, device control, web protection, and security settings management.
• Experience designing Microsoft Defender for Cloud Apps architecture, including cloud discovery, application governance, session controls, Conditional Access App Control, activity policies, and SaaS application protection.
• Strong experience designing Microsoft Purview Information Protection solutions, including data classification, sensitive information types, trainable classifiers, sensitivity labels, auto-labelling, encryption, and content marking.
• Experience leading delivery from discovery and design through pilot, rollout, go-live.
• Strong understanding of Zero Trust architecture and its application across identities, endpoints, email, applications, collaboration services, and enterprise data.
• Ability to evaluate technical decisions, platform limitations, security risks, compliance risks, dependencies, and scope in complex enterprise environments.

Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
• Desirable Microsoft certifications include: SC-100, SC-200, AZ-500, SC-300, SC-401, AZ-305, MD-102.

Preferred experience:

• Experience delivering large-scale Microsoft Defender XDR and Microsoft Purview products for enterprise or regulated organisations.
• Experience designing integrated Defender XDR architectures across endpoints, identities, email, collaboration services, cloud applications, and security operations.
• Experience deploying Microsoft Defender for Endpoint across large endpoint estates using pilot groups, deployment rings, validation criteria, and phased rollouts.
• Experience designing Microsoft Purview controls across Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, supported endpoints, and supported cloud applications.
• Experience producing high-level designs, detailed designs, architecture diagrams, security standards, configuration guides, policy mappings, and Architecture Decision Records.
• Experience working with Security, Compliance, Legal, Risk, Identity, Endpoint, Messaging, SOC, and senior client stakeholders.
• Experience supporting design reviews, production readiness, go-live, and knowledge transfer.
• Experience delivering multi-country or multi-entity security-transformation programmes.
• Experience in banking, financial services or another regulated industry.
• Local experience and established stakeholder-engagement capability in Malaysia are preferred.