Security Architect - M365 / Modern Workplace

ZipRecruiter; Luton; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading company seeks a highly experienced Security Architect to oversee the design and governance of M365 security solutions. This critical role entails architecting secure environments, developing security strategies, and ensuring compliance with evolving threats and regulations. Applicants should have extensive experience with Microsoft security technologies and strong knowledge of industry-standard frameworks.

Qualifications

• Extensive experience in architecting secure M365 solutions in complex environments.
• Strong knowledge of cloud models and conditional access.
• Solid understanding of regulatory compliance like GDPR.

Responsibilities

• Define and lead architectural design of secure Microsoft 365 environments.
• Conduct security risk assessments and design mitigation strategies.
• Collaborate with IT, legal, and compliance teams on security policies.

Skills

Microsoft security technologies

Security frameworks (Zero Trust, NIST, ISO 27001, CIS)

Risk management

Automation and scripting

Education

Microsoft certifications (SC-100, SC-300, MS-500, AZ-500)

Job description

Job Description

Security Architect - M365 / Modern Workplace

Summary:

We are seeking a highly experienced and strategic Modern workplace / M365 Security Architect to lead the design, governance, and oversight of Microsoft 365 security solutions across the enterprise. This role extends to cover the whole Modern Workplace Delivery portfolio which covers all technology capabilities which intersect with end user productivity and associated systems. This role is critical in shaping and enforcing a secure environment, aligning with organizational goals, compliance mandates, and evolving threat landscapes.

This role is a pivotal role which resides in the delivery function but must have strong relationships with Information Security function to help accelerate design & solution assurance.

Key Responsibilities:

• Define and lead the architectural design of secure Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft Entra ID.
• Develop and maintain the enterprise security architecture strategy for M365, aligned with Zero Trust principles and business requirements.
• Architect and implement security controls and frameworks using Microsoft security technologies such as Microsoft Defender XDR, Microsoft Purview (Compliance, DLP, Insider Risk), Entra ID, and Intune.
• Provide architectural security assurance for other technologies which fall into the delivery portfolio.
• Guide governance around , access management, data protection, device management, and threat protection within the M365 ecosystem.
• Collaborate with stakeholders across IT, security, legal, and compliance teams to ensure alignment on security policies and controls.
• Conduct security risk assessments, design mitigation strategies, and provide technical leadership for incident response and remediation related to M365 and other end user services.
• Stay current with M365 roadmap developments and evolving cyber threats to proactively recommend improvements.

Required Skills and Qualifications:

• Extensive experience in architecting secure M365 solutions in complex enterprise environments.
• Deep expertise in Microsoft security technologies including Defender for Office 365, Microsoft Purview, Entra ID (formerly Azure AD), and Intune.
• Strong knowledge of security frameworks (e.g., Zero Trust, NIST, ISO 27001, CIS), regulatory compliance (e.g., GDPR, HIPAA), and risk management.
• Solid understanding of cloud models, conditional access, MFA, RBAC, and privileged access management.
• Proficiency with automation and scripting (e.g., PowerShell, Microsoft Graph API) for configuration and monitoring.
• Microsoft certifications such as SC-100 (Cybersecurity Architect), SC-300, MS-500, or AZ-500 strongly .