Security Architect – Entra ID, MS, Azure

London Source: WhatJobs

£90,000–£130,000

Establish and maintain security architecture principles, patterns, standards and control requirements
Define security design-assurance criteria and assess technical designs against agreed requirements
Assess threats, risks, vulnerabilities and control gaps across current, coexistence, transition and target states
Develop security controls for coexistence between existing environments and new target services
Define and assure Zero Trust principles across identity, devices, applications, data and network access
Establish security patterns for identity protection, privileged access, least privilege, Conditional Access and administrative boundaries
Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures
Establish requirements for logging, monitoring, alerting, threat detection and incident response
Review technical architectures and solution designs for security weaknesses, gaps and dependencies
Assess migration strategies and cutover approaches from a security perspective
Review security exceptions and deviations, documenting residual risk, compensating controls and treatments
Maintain visibility of significant security risks, owners and mitigation plans
Develop practical remediation and risk-treatment approaches with technical teams
Incorporate security requirements into programme plans, designs, migration patterns, testing and operational handover
Support security testing and assurance before migrations and go-live decisions
Provide security input into operational readiness and production transition
Align designs with security policies, information-security standards, data-protection obligations and regulatory requirements
Maintain HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records
Provide risk-based security recommendations to programme leadership and senior stakeholders
Support continuous improvement of security controls throughout the transformation

Requirements

Extensive experience working as a Security Architect across complex enterprise technology environments
Strong technical knowledge of Microsoft Entra ID, Microsoft 365, Azure, endpoint security, networks and application security
Strong understanding of hybrid and cloud security architectures and legacy-environment transitions
Proven experience applying Zero Trust, least privilege, privileged access and defence-in-depth principles
Strong knowledge of identity and access security, including authentication, Conditional Access, identity protection and administrative controls
Experience designing security controls across endpoints, email, data, applications, infrastructure and networks
Strong understanding of security logging, monitoring, threat detection and incident-response requirements
Experience in threat modelling, security risk assessment, control mapping and architecture assurance
Experience assessing security risks associated with migration, coexistence, cutover and transition activities
Understanding of data protection, information governance and relevant regulatory or assurance requirements
Experience reviewing security exceptions and developing risk-treatment or compensating-control strategies
Strong technical writing skills and experience producing security architecture documentation, risk assessments, threat models, control matrices and design-assurance outputs
Experience working within formal architecture and security-governance frameworks
Ability to translate technical security risks into clear business impacts, choices and recommendations

Core Competencies

Demonstrates extensive experience as a Security Architect with a strong focus on Microsoft Entra ID, Microsoft 365, Azure, and hybrid cloud security architectures. Proficient in applying Zero Trust principles, developing security controls, and conducting risk assessments within complex enterprise environments.