Lead Security Architect - Microsoft Defender XDR & Purview – Project Manager

Unison Group; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Unison Group seeks a senior cybersecurity architect to lead the design and governance of Microsoft Defender XDR and Microsoft Purview solutions for a large enterprise footprint in Malaysia. You will drive architecture across endpoints, identity, cloud apps, and information protection, translating complex regulatory needs into concrete designs.

Responsibilities include leading architecture sessions, producing design artifacts, and guiding engineering through pilot, rollout, and production.

Qualifications

• 10+ years in cybersecurity architecture or enterprise security delivery.
• Hands-on with Microsoft Defender XDR and Microsoft Purview.
• Experience designings Defender for Endpoint architecture and Defender for Cloud Apps architectures.
• Experience leading delivery from discovery to go-live.

Responsibilities

• Lead discovery, requirements analysis, architecture, and design across Defender XDR and Purview.
• Design integrated Defender XDR solutions covering Endpoint, Identity, Office 365, and Cloud Apps.
• Design Purview solutions covering Information Protection, DLP, Insider Risk, and more.
• Translate business and regulatory requirements into implementable security designs.
• Prepare high-level and detailed designs, diagrams, and implementation guides.
• Lead architecture workshops and governance discussions.
• Provide architectural guidance throughout pilot, rollout, and production.
• Review implementations to ensure alignment with approved designs.

Skills

Cybersecurity architecture

Microsoft Defender XDR

Microsoft Purview

Solution architecture

Security consulting

Enterprise security delivery

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud Apps

Microsoft Purview

Job description

• Lead discovery, requirements analysis, architecture, and solution-design activities across Microsoft Defender XDR and Microsoft Purview.
• Design integrated Microsoft Defender XDR solutions covering Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Defender for Cloud Apps.
• Design Microsoft Purview solutions covering Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Lifecycle Management, Records Management, eDiscovery, and Audit.
• Translate business, cybersecurity, privacy, legal, data-protection, and regulatory requirements into implementation-ready Microsoft security and compliance designs.
• Prepare high-level designs, detailed designs, architecture diagrams, configuration standards, policy mappings, implementation guides, and Architecture Decision Records.
• Lead architecture workshops, technical design sessions, design reviews, implementation walkthroughs, and architecture-governance discussions.
• Provide architectural guidance to engineering and implementation teams throughout pilot, validation, phased deployment, and production rollout activities.
• Review implementation evidence and validate that Microsoft Defender XDR and Microsoft Purview configurations align with approved designs.

Required technical skills

• 10 to 12+ years of experience in cybersecurity architecture, Microsoft security consulting, solution architecture, or enterprise security delivery.
• Strong hands-on experience with both Microsoft Defender and Microsoft Purview.
• Strong knowledge of Defender XDR, Defender for Endpoint, Defender for Cloud Apps, Microsft Purview Specifically.
• Strong experience designing Microsoft Defender for Endpoint architecture, including endpoint onboarding, endpoint security policies, endpoint detection and response, antivirus, attack surface reduction, device control, web protection, and security settings management.
• Experience designing Microsoft Defender for Cloud Apps architecture, including cloud discovery, application governance, session controls, Conditional Access App Control, activity policies, and SaaS application protection.
• Strong experience designing Microsoft Purview Information Protection solutions, including data classification, sensitive information types, trainable classifiers, sensitivity labels, auto-labelling, encryption, and content marking.
• Experience leading delivery from discovery and design through pilot, rollout, go-live.
• Strong understanding of Zero Trust architecture and its application across identities, endpoints, email, applications, collaboration services, and enterprise data.
• Ability to evaluate technical decisions, platform limitations, security risks, compliance risks, dependencies, and scope in complex enterprise environments.