M365 Security Architect

DIGITAL BRIGHT TECHNOLOGIES; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Digital Bright Technologies in Kuala Lumpur, Malaysia, seeks a seasoned M365 Security Architect to drive design and governance for a large-scale M365 deployment. You will own the Low-Level Design (LLD), ensure regulatory compliance, and manage complex inter-dependencies across hybrid environments.

The role demands 5+ years in M365 security architecture, a proven record for large user bases, and expertise in Hybrid Identity with Ping Federated Identity and Entra ID integration.

Qualifications

• Minimum 5 years in M365 Security Architecture.
• Proven track record designing security for environments >10,000 users.
• Expertise in translating business requirements into technical blueprints focusing on Hybrid Identity and Cloud Security posture.

Responsibilities

• Lead design and governance for a 40,000-user M365 transformation.
• Create Low-Level Design (LLD) and align with regulatory compliance.
• Navigate complex technical inter-dependencies and drive security strategy across the stack.

Skills

M365 Security

Hybrid Identity

Ping Federated Identity

Tools

Entra ID

Job description

Kuala Lumpur, Malaysia | Posted on 04/24/2026

Job Description 1: M365 Security Architect

Experience: 5+ Years in Large-Scale Infrastructure Design

Role Purpose

The M365 Security Architect will lead the design and governance for a 40,000-user M365 transformation. You will be responsible for creating the Low-Level Design (LLD), ensuring compliance across highly regulated sectors, and navigating complex technical inter-dependencies.

Key Requirements

• Experience: Minimum 5 years in M365 Security Architecture. Must have a proven track record of designing security for environments exceeding 10,000 users.
• Architecture Mastery: Expert in translating business requirements into technical blueprints, specifically focusing on Hybrid Identity and Cloud Security posture.
• Critical Skillset: Advanced experience withPing Federated Identityand its integration with Entra ID.

Must-Have Technical Expertise (M365 Components)

• Encryption & Compliance: Information Protection & DLP (DSC01).
• Defender Suite (Design/Strategy): Endpoint (TP01), Identity (TP02), Office (TP03), Cloud Apps (TP04), and Servers (TP05).
• Governance: Data Lifecycle Management (DSC02), eDiscovery (DCS03), and Auditing (DSC04).