Security Architect - M365 / Modern Workplace

JR United Kingdom; Bedford; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading company in the UK seeks a highly experienced Security Architect for M365 and Modern Workplace. The role involves leading security design, governance, and oversight of Microsoft 365 solutions, ensuring alignment with organizational goals and compliance mandates. The ideal candidate will have extensive architectural experience and a strong familiarity with Microsoft security technologies.

Qualifications

• Extensive experience in architecting secure M365 solutions.
• Deep expertise in Microsoft security technologies like Defender and Intune.
• Strong knowledge of security frameworks and regulatory compliance.

Responsibilities

• Define and lead architectural design of secure M365 environments.
• Guide governance around identity, access management, and threat protection.
• Conduct security risk assessments and provide technical leadership.

Skills

Microsoft security technologies

Architecting secure M365 solutions

Cloud identity models

Automation and scripting

Education

Microsoft certifications SC-100, SC-300, MS-500, AZ-500

Job description

Social network you want to login/join with:

Security Architect - M365 / Modern Workplace, bedford

col-narrow-left

Client:

LHH

Location:

bedford, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

06.06.2025

Expiry Date:

21.07.2025

col-wide

Job Description:

Security Architect - M365 / Modern Workplace

Summary:

We are seeking a highly experienced and strategic Modern workplace / M365 Security Architect to lead the design, governance, and oversight of Microsoft 365 security solutions across the enterprise. This role extends to cover the whole Modern Workplace Delivery portfolio which covers all technology capabilities which intersect with end user productivity and associated systems. This role is critical in shaping and enforcing a secure environment, aligning with organizational goals, compliance mandates, and evolving threat landscapes.

This role is a pivotal role which resides in the delivery function but must have strong relationships with Information Security function to help accelerate design & solution assurance.

Key Responsibilities:

• Define and lead the architectural design of secure Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft Entra ID.
• Develop and maintain the enterprise security architecture strategy for M365, aligned with Zero Trust principles and business requirements.
• Architect and implement security controls and frameworks using Microsoft security technologies such as Microsoft Defender XDR, Microsoft Purview (Compliance, DLP, Insider Risk), Entra ID, and Intune.
• Provide architectural security assurance for other technologies which fall into the delivery portfolio.
• Guide governance around identity, access management, data protection, device management, and threat protection within the M365 ecosystem.
• Collaborate with stakeholders across IT, security, legal, and compliance teams to ensure alignment on security policies and controls.
• Conduct security risk assessments, design mitigation strategies, and provide technical leadership for incident response and remediation related to M365 and other end user services.
• Stay current with M365 roadmap developments and evolving cyber threats to proactively recommend improvements.

Required Skills and Qualifications:

• Extensive experience in architecting secure M365 solutions in complex enterprise environments.
• Deep expertise in Microsoft security technologies including Defender for Office 365, Microsoft Purview, Entra ID (formerly Azure AD), and Intune.
• Strong knowledge of security frameworks (e.g., Zero Trust, NIST, ISO 27001, CIS), regulatory compliance (e.g., GDPR, HIPAA), and risk management.
• Solid understanding of cloud identity models, conditional access, MFA, RBAC, and privileged access management.
• Proficiency with automation and scripting (e.g., PowerShell, Microsoft Graph API) for configuration and monitoring.
• Microsoft certifications such as SC-100 (Cybersecurity Architect), SC-300, MS-500, or AZ-500 strongly preferred.