Description

You will define and implement end-to-end architecture for Microsoft 365 collaboration and security platforms, focusing on governance and security-by-design principles.

This role is on-site.

Responsibilities

• Architect identity and access management using Microsoft Entra ID, implementing RBAC, Zero Trust alignment, Conditional Access, MFA, and risk-based access.
• Design and govern messaging and collaboration capabilities across Exchange Online and Microsoft Teams, including external sharing and guest access controls.
• Architect endpoint management strategies using Microsoft Intune for device compliance, configuration profiles, and application protection policies.
• Design and implement Microsoft Purview information protection and Data Loss Prevention (DLP) policies across Exchange, Teams, SharePoint, and endpoints.
• Ensure regulatory compliance and audit readiness through secure mail flow configuration and content collaboration architecture.

Required Skills

• 6-15 years of IT experience, including 5+ years in Microsoft 365 architecture roles.
• Deep expertise in DLP and Microsoft 365 security architecture across collaboration services.
• Strong knowledge of Exchange Online architecture, including hybrid deployments and secure mail flow.
• Proficiency in identity and access architecture with Microsoft Entra ID, Conditional Access, and Identity Protection.
• Experience with Microsoft Intune, SharePoint Online, OneDrive, and Microsoft Teams governance.
• Ability to implement Purview DLP and sensitivity labels for information protection.
• Proficiency in PowerShell and Graph API for automation.

Preferred Skills

• Microsoft certifications (Enterprise Administrator Expert, Security/Compliance/Identity Expert, or Endpoint Administrator Associate).
• Experience with the Defender suite (Defender for Office 365, Endpoint, and Identity).
• Experience with multi-geo/global tenant environments and tenant-to-tenant migrations.

Key Skills

Education

Any Graduate