Cloud Security & Exposure Management Architect

Avanade; Greater London; On-site; GBP 50,000 - 80,000; Full time

Job summary

Avanade is seeking a Cloud Security & Exposure Management Architect to lead client-facing engagements, shaping security solutions across cloud, identity, endpoint, and data environments.

You will apply Microsoft Security technologies including Defender, Sentinel, Entra, and Defender for Cloud, coordinating with account and delivery teams to reduce exploitable risks and strengthen security operations.

Qualifications

• Experience as a Cloud Security Architect on complex client-facing projects.
• Strong knowledge of cloud security across cloud, identity, endpoint, application and data environments.
• Proficiency with Microsoft Security technologies and threat-informed approaches.
• Familiarity with Microsoft platforms including Windows, Microsoft 365, Entra ID, Azure and Defender.
• Ability to apply MITRE ATT&CK framework to security planning and defense.

Responsibilities

• Lead defined workstreams or small project teams within cloud security engagements.
• Manage deliverables, including exposure assessments, remediation plans, security control improvements, and reporting outputs against milestones.
• Contribute to solution architecture and pre-sales deal shaping for cloud security opportunities.
• Build trusted relationships with client security, cloud and operations stakeholders.
• Design, implement and integrate cloud security, exposure management, threat detection and security operations capabilities.
• Prioritise exploitable risks across cloud, identity, endpoint, application and data environments.

Skills

Cloud security

Threat modelling

Client-facing

Security operations

MITRE ATT&CK

Tools

Microsoft Defender

Sentinel

Entra ID

Azure

Defender for Cloud

Job description

Salary: £50,000 - 80,000 per year

Requirements:

• We are looking for an experienced Cloud Security & Exposure Management Architect.
• We need someone who can work in a client-facing role on complex, leading-edge projects.
• We expect strong knowledge of cloud security and exposure management across cloud, identity, endpoint, application, and data environments.
• We need experience with Microsoft Security technologies and modern threat-informed approaches.
• We need understanding of Microsoft Sentinel, Defender for Cloud, Defender XDR, Entra, and related Microsoft Security technologies.
• We expect knowledge of threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and remediation prioritisation.
• We need understanding of incident response, cyber recovery, and security operations centre functions.
• We expect familiarity with Microsoft platforms including Windows, Microsoft 365, Entra ID, Azure, and Defender.
• We need the ability to apply frameworks such as MITRE ATT&CK.
• We expect an understanding of privacy, security, and compliance challenges around client data, critical assets, and digital services.
• We value awareness of emerging technologies in cyber defence, cloud security, attack surface management, vulnerability management, and exposure management.

Responsibilities:

• Lead defined workstreams or small project teams within larger cloud security and exposure management engagements.
• Manage assigned deliverables, including exposure assessments, remediation plans, security control improvements, and reporting outputs against agreed milestones.
• Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities.
• Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.
• Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities.
• Understand and prioritise exploitable risks across cloud, identity, endpoint, application, and data environments.
• Support incident response, cyber recovery, and the use of exposure management to reduce security incident likelihood and impact.
• Support security operations centre functions by using exposure insights for detection engineering, prioritised remediation, and operational risk management.
• Develop strong working relationships with account teams, delivery teams, security architects, and client stakeholders.
• Identify customer needs and business goals and translate them into practical cloud security and exposure management solution options.
• Support security transformation and operations opportunities using standardised tools, Microsoft Security capabilities, partner technologies, and exposure-led assessment approaches.
• Contribute to proposals, client presentations, solution discussions, and technical input throughout the sales process.
• Conduct and follow through the sales process to support deal closure.

Technologies:

• Architect
• Azure
• Cloud
• Support
• Microsoft 365
• Security
• Windows
• Office 365
• Exposed

More:

We are Avanade, and we are building our security practice with a Cloud Security & Exposure Management Architect who will join us in a client-facing role on some of our most exciting and complex projects. You will help our clients improve their cloud security and exposure management maturity by identifying, prioritizing, and reducing exploitable risks across modern environments using Microsoft Security technologies. You will also support our Security presales and Architecture function by contributing proposals, solution options, and architecture inputs for enterprise clients, with a focus on cloud security, exposure management, and Microsoft Security-led transformation. This role includes partial delivery expectations for the year and offers the opportunity to work closely with account teams, delivery teams, security architects, and client stakeholders.

last updated 37 week of 2026