Lead Security Architect (MDE, Entra ID, MDCA)

Avanade; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Avanade in Malaysia seeks an experienced Security Architect to lead the design of integrated Microsoft security solutions for large enterprises. You will shape Defender and Entra ID architectures, guide implementation, and align security requirements with delivery outcomes.

You will collaborate with security, identity, endpoint, SOC, and delivery teams, produce technical designs, perform architecture reviews, and support go-live and warranty phases.

Qualifications

• 10+ years in cybersecurity architecture or related roles.
• Strong architecture experience with Defender XDR, Defender for Endpoint, Defender for Cloud Apps.
• Expertise in Entra ID, AD integration, identity synchronization, MFA, CA, RBAC, PIM.
• Lead architecture workshops and communicate decisions to technical and senior stakeholders.
• ownership of design quality and scope boundaries.
• Experience designing EDR baselines, antivirus policies, ASR rules, onboarding and coexistence.
• Knowledge of MDCA connectors, cloud discovery, threat detection, CA App Control policies.
• Understanding of Microsoft security licensing, prerequisites, policy dependencies, governance.
• Comfort coordinating across security, identity, endpoint, Intune, SOC, engineering, and client IT teams.

Responsibilities

• Lead discovery and architecture across Defender XDR, Defender for Endpoint, Entra ID, and Cloud Apps.
• Assess endpoint security configurations, identity controls, MFA, CA, app connectors, and dependencies.
• Define Defender for Endpoint architecture: EDR baselines, antivirus policies, ASR, onboarding, deployment via Intune.
• Design MDCA connectors and policies for Microsoft 365 apps, cloud discovery, threat detection, files, sessions, and CA App Control.
• Define Entra ID design considerations: identity synchronization, CA, MFA, RBAC, PIM, licensing, and Defender integration.
• Produce technical designs, configuration guidance, integration approaches, architecture decisions, dependencies, risk inputs.
• Lead design reviews, implementation walkthroughs, stakeholder discussions, and knowledge-transfer sessions.
• Provide architecture guidance during go-live, hypercare, and warranty for issues related to approved designs.

Skills

Defender XDR

Defender for Endpoint

MDCA / Cloud Apps

Entra ID

MFA

Conditional Access

RBAC / PIM

Identity synchronization

Intune

Architecture workshops

Stakeholder mgmt

Security governance

Tools

Intune

Azure AD

MDCA

Job description

Summary

Join Avanade’s Security Practice to lead the architecture of integrated Microsoft security solutions for large enterprise environments. You will shape Defender and identity designs, guide implementation, manage technical stakeholders, and maintain alignment between approved architecture, security requirements, platform dependencies, and delivery outcomes.

Key Responsibilities

• Lead discovery and architecture activities across Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Entra ID, and Microsoft Defender for Cloud Apps.
• Assess endpoint security configurations, identity controls, user synchronization, MFA, Conditional Access, application connectors, policy requirements, and integration dependencies.
• Define Defender for Endpoint architecture covering EDR baselines, antivirus policies, Attack Surface Reduction rules, onboarding requirements, coexistence considerations, and policy deployment through Intune.
• Design Defender for Cloud Apps connectors and policies for Microsoft 365 applications, cloud discovery, threat detection, files, sessions, and Conditional Access App Control.
• Define Microsoft Entra ID design considerations for identity synchronization, Conditional Access, MFA, RBAC, PIM, licensing, and integration with Defender capabilities.
• Produce technical designs, configuration guidance, integration approaches, architecture decisions, assumptions, dependencies, and risk inputs.
• Lead design reviews, implementation walkthroughs, stakeholder discussions, and knowledge-transfer sessions.
• Provide architecture guidance during go-live, hypercare, and warranty for issues related to approved designs and configuration guidance.

Qualifications

Skill and experiences

• Min 10+ years of experience in cybersecurity architecture, Microsoft security consulting, enterprise security delivery, or related technology roles.
• Strong architecture experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps.
• Strong knowledge of Microsoft Entra ID, Active Directory integration, identity synchronization, MFA, Conditional Access, RBAC, and Privileged Identity Management.
• Able to lead architecture workshops and explain security decisions, risks, prerequisites, and implementation guidance to technical and senior stakeholders
• Strong ownership of design quality and scope boundaries
• Experience designing EDR baselines, antivirus policies, ASR rules, endpoint onboarding, security-policy deployment, and legacy security-tool coexistence approaches.
• Knowledge of MDCA connectors, cloud discovery, threat-detection, file, session, and Conditional Access App Control policies.
• Understanding of Microsoft security licensing, access prerequisites, policy dependencies, and enterprise security governance
• Comfortable coordinating across security, identity, endpoint, Intune, SOC, engineering, delivery, and client IT teams throughout solution design and delivery
• Desirable Microsoft certifications include SC-200, MD-102, SC-900, AZ-500, SC-300, SC-401.