Lead Microsoft Defender & Entra ID Security Architect

Avanade; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Avanade in Malaysia seeks an experienced Security Architect to lead the design of integrated Microsoft security solutions for large enterprises. You will shape Defender and Entra ID architectures, guide implementation, and align security requirements with delivery outcomes.

You will collaborate with security, identity, endpoint, SOC, and delivery teams, produce technical designs, perform architecture reviews, and support go-live and warranty phases.

Qualifications

• 10+ years in cybersecurity architecture or related roles.
• Strong architecture experience with Defender XDR, Defender for Endpoint, Defender for Cloud Apps.
• Expertise in Entra ID, AD integration, identity synchronization, MFA, CA, RBAC, PIM.
• Lead architecture workshops and communicate decisions to technical and senior stakeholders.
• ownership of design quality and scope boundaries.
• Experience designing EDR baselines, antivirus policies, ASR rules, onboarding and coexistence.
• Knowledge of MDCA connectors, cloud discovery, threat detection, CA App Control policies.
• Understanding of Microsoft security licensing, prerequisites, policy dependencies, governance.
• Comfort coordinating across security, identity, endpoint, Intune, SOC, engineering, and client IT teams.

Responsibilities

• Lead discovery and architecture across Defender XDR, Defender for Endpoint, Entra ID, and Cloud Apps.
• Assess endpoint security configurations, identity controls, MFA, CA, app connectors, and dependencies.
• Define Defender for Endpoint architecture: EDR baselines, antivirus policies, ASR, onboarding, deployment via Intune.
• Design MDCA connectors and policies for Microsoft 365 apps, cloud discovery, threat detection, files, sessions, and CA App Control.
• Define Entra ID design considerations: identity synchronization, CA, MFA, RBAC, PIM, licensing, and Defender integration.
• Produce technical designs, configuration guidance, integration approaches, architecture decisions, dependencies, risk inputs.
• Lead design reviews, implementation walkthroughs, stakeholder discussions, and knowledge-transfer sessions.
• Provide architecture guidance during go-live, hypercare, and warranty for issues related to approved designs.

Skills

Defender XDR

Defender for Endpoint

MDCA / Cloud Apps

Entra ID

MFA

Conditional Access

RBAC / PIM

Identity synchronization

Intune

Architecture workshops

Stakeholder mgmt

Security governance

Tools

Intune

Azure AD

MDCA

Job description

Avanade in Malaysia seeks an experienced Security Architect to lead the design of integrated Microsoft security solutions for large enterprises. You will shape Defender and Entra ID architectures, guide implementation, and align security requirements with delivery outcomes.

You will collaborate with security, identity, endpoint, SOC, and delivery teams, produce technical designs, perform architecture reviews, and support go-live and warranty phases.