Microsoft Data Protection and Secure Collaboration Architect

Vbeyond; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Vbeyond in London is seeking an experienced Microsoft Data Protection and Secure Collaboration Architect to assess Echoworx BeSecure usage and design a cost-efficient future approach, leveraging Microsoft 365 capabilities where possible.

The role involves evaluating encrypted-email and large-file-transfer needs, identifying gaps, and delivering a practical PoC, target architecture, and migration roadmap while balancing security, compliance and cost with stakeholder input.

Qualifications

• Strong hands-on experience with Microsoft Purview and Information Protection.
• Expertise in sensitivity labeling and information protection policies.
• Experience designing secure external collaboration and sharing using Microsoft 365.
• Experience with SharePoint Online, OneDrive and Microsoft email encryption.
• Understanding of secure customer and partner communications, including encrypted email and large-file-transfer use cases.
• Ability to assess existing specialist solutions and determine where Microsoft-native capabilities can meet business requirements.
• Proven ability to design, deliver and test proofs of concept.
• Experience producing target architectures, migration roadmaps and implementation plans.

Responsibilities

• Assess Echoworx BeSecure usage and secure communications.
• Review customer/partner journeys and capture business requirements.
• Design secure external-sharing using Microsoft 365 capabilities.
• Evaluate Microsoft-native capabilities versus specialist tools.
• Identify gaps and determine when specialist tools are still needed.
• Design, deliver and test proofs of concept.
• Define target architecture with encryption and information-protection controls.
• Develop migration roadmap and implementation plan.
• Document findings and recommendations.
• Engage stakeholders to validate requirements and secure agreement.

Skills

Microsoft Purview

Information Protection

Sensitivity labeling

Encryption

SharePoint Online

OneDrive

Email encryption

External collaboration

PoC design

Migration roadmap

Job description

Job Overview

We are seeking an experienced Microsoft Data Protection and Secure Collaboration Architect to assess the organisation's current use of Echoworx BeSecure and design a more cost-effective future approach for secure customer and partner communications, leveraging existing Microsoft 365 capabilities wherever possible.

The successful candidate will evaluate current encrypted-email and large-file-transfer requirements, assess Microsoft-native solutions, identify any remaining capability gaps and recommend an appropriate target architecture. The role will involve designing and delivering a proof of concept (PoC), validating the proposed approach and developing a practical migration and implementation roadmap.

You will work closely with technical teams and business stakeholders to balance security, compliance, cost, usability and the customer and partner experience.

Key Responsibilities

• Assess the current use of Echoworx BeSecure, including secure email, encrypted communications and large-file-transfer use cases.
• Review existing customer and partner communication journeys, identifying business requirements, usability considerations, security controls and compliance needs.
• Design secure external-sharing solutions using Microsoft 365 capabilities, including SharePoint Online, OneDrive and Microsoft email encryption.
• Assess and recommend appropriate use of Microsoft Purview, Microsoft Information Protection, sensitivity labels and encryption.
• Evaluate Microsoft-native capabilities against existing requirements and identify where they can replace or reduce reliance on specialist solutions.
• Identify residual functional, security, compliance or usability gaps that may require a specialist secure-transfer solution.
• Compare solution options based on cost, risk, security, compliance, functionality and user experience.
• Design, configure and deliver a proof of concept to validate the recommended Microsoft-native secure collaboration approach.
• Test proposed solutions against agreed business scenarios, security controls and customer or partner communication requirements.
• Define the target architecture, including relevant information-protection, encryption and external-sharing controls.
• Develop a practical migration roadmap and implementation plan, including dependencies, risks, transition considerations and implementation priorities.
• Document findings, design decisions, PoC results, recommendations and implementation guidance.
• Engage technical teams and business stakeholders to validate requirements, communicate trade-offs and secure agreement on the recommended approach.

Essential Skills and Experience

• Strong hands-on experience with Microsoft Purview and Microsoft Information Protection.
• Expertise in sensitivity labelling, information protection policies and encryption.
• Practical experience designing secure external collaboration and sharing using Microsoft 365.
• Experience with SharePoint Online, OneDrive and Microsoft email encryption.
• Understanding of secure customer and partner communications, including encrypted email and large-file-transfer use cases.
• Ability to assess existing specialist solutions and determine where Microsoft-native capabilities can meet business requirements.
• Experience identifying residual capability gaps and assessing when specialist secure-transfer tools remain necessary.
• Proven ability to design, deliver and test proofs of concept.
• Experience producing target architectures, migration roadmaps and implementation plans.
• Strong stakeholder engagement, technical documentation and solution evaluation skills.
• Ability to compare solutions across cost, security, compliance, risk and user experience.

Expected Deliverables

The successful candidate will be expected to deliver:

• Current-state assessment: Review of Echoworx BeSecure usage, existing secure communication journeys and business requirements.
• Options assessment and recommendation: Comparison of Microsoft-native capabilities and specialist solutions, including costs, risks, benefits and residual gaps.
• Proof of concept: Design, implementation and testing of the proposed approach against representative business scenarios.
• Target architecture: Documented design for secure external communications using Microsoft 365 and applicable information-protection controls.
• Migration roadmap: Practical transition approach covering dependencies, risks and implementation priorities.
• Implementation plan: Clear actions and recommendations for moving towards the agreed future-state solution.

Working Arrangements

• Location: London, UK.
• Working pattern: Hybrid, with three days per week onsite at the client's office.