Lead Security Architect (with Presales)

Summary
 

Join Avanade’s Security Practice to lead the architecture of integrated Microsoft security solutions for large enterprise environments. You will shape Defender and identity designs, guide implementation, manage technical stakeholders, and maintain alignment between approved architecture, security requirements, platform dependencies, and delivery outcomes.

Key Responsibilities

• Lead discovery and architecture activities across Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Entra ID, and Microsoft Defender for Cloud Apps.
• Assess endpoint security configurations, identity controls, user synchronization, MFA, Conditional Access, application connectors, policy requirements, and integration dependencies.
• Define Defender for Endpoint architecture covering EDR baselines, antivirus policies, Attack Surface Reduction rules, onboarding requirements, coexistence considerations, and policy deployment through Intune.
• Design Defender for Cloud Apps connectors and policies for Microsoft 365 applications, cloud discovery, threat detection, files, sessions, and Conditional Access App Control.
• Define Microsoft Entra ID design considerations for identity synchronization, Conditional Access, MFA, RBAC, PIM, licensing, and integration with Defender capabilities.
• Produce technical designs, configuration guidance, integration approaches, architecture decisions, assumptions, dependencies, and risk inputs.
• Lead design reviews, implementation walkthroughs, stakeholder discussions, and knowledge-transfer sessions.
• Provide architecture guidance during go-live, hypercare, and warranty for issues related to approved designs and configuration guidance.
• Lead pre-sales activities, including technical presentations, demonstrations, and proof-of-concept engagements to showcase the value of Microsoft Security solutions
• Collaborate with sales teams and customers to understand their security needs and design tailored solutions that address their challenges. 

.

Skill and experiences

• 8+ years of experience in cybersecurity architecture, Microsoft security consulting, enterprise security delivery, or related technology roles
• Proven experience in pre-sales, consulting, or commercial leadership roles in infrastructure/security solutions, with deep knowledge of security architectures, solutions, and technologies.  
• Strong architecture experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps.
• Strong knowledge of Microsoft Entra ID, Active Directory integration, identity synchronization, MFA, Conditional Access, RBAC, and Privileged Identity Management.
• Able to lead architecture workshops and explain security decisions, risks, prerequisites, and implementation guidance to technical and senior stakeholders
• Strong ownership of design quality and scope boundaries
• Experience designing EDR baselines, antivirus policies, ASR rules, endpoint onboarding, security-policy deployment, and legacy security-tool coexistence approaches.
• Knowledge of MDCA connectors, cloud discovery, threat-detection, file, session, and Conditional Access App Control policies.
• Understanding of Microsoft security licensing, access prerequisites, policy dependencies, and enterprise security governance
• Comfortable coordinating across security, identity, endpoint, Intune, SOC, engineering, delivery, and client IT teams throughout solution design and delivery
• Desirable Microsoft certifications include SC-200, MD-102, SC-900, AZ-500, SC-300, SC-401.

.