M365 Security Architect

Lavu Tech Solutions Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Lavu Tech Solutions Sdn Bhd in Kuala Lumpur is seeking an experienced M365 Security Architect to design and implement security across Microsoft 365 services including Exchange Online, SharePoint Online, Teams, and OneDrive for Business.

You will lead Defender suite deployment and Entra ID security, define Zero Trust architecture, and develop Data Loss Prevention and information protection strategies using Microsoft Purview.

Qualifications

• Minimum 5 years in M365 Security Architecture.
• Proven track record designing security for environments >10,000 users.
• Expert in translating business requirements into technical blueprints with focus on Hybrid Identity and Cloud Security posture.
• Advanced experience with Ping Federated Identity and its integration with Entra ID.

Responsibilities

• Design and implement Microsoft 365 security architecture aligned with organizational security strategy.
• Secure core M365 services: Exchange Online, SharePoint Online, Teams, OneDrive for Business.
• Lead implementation of Defender suite and Entra ID security with Conditional Access & Zero Trust.
• Develop data protection strategies using Microsoft Purview (DLP, Information Protection, Compliance).
• Manage identity and access governance.
• Conduct security assessments, threat modeling, and risk analysis.
• Define security policies, standards, and best practices.
• Support incident response and security investigations.
• Collaborate with cloud, infrastructure, and SOC teams.

Skills

M365 Security

Hybrid Identity

Azure AD

Zero Trust

Information Protection

Threat Modeling

Incident Response

Tools

Ping Federated Identity

Job description

Responsibilities

• Design and implement Microsoft 365 security architecture aligned with organizational security strategy.
• Secure core M365 services including:
• Exchange Online
• SharePoint Online
• Microsoft Teams
• OneDrive for Business
• Lead implementation of:
• Microsoft Defender suite
• Microsoft Entra ID (Azure AD) security
• Conditional Access & Zero Trust architecture
• Develop data protection strategies using:
• Microsoft Purview (DLP, Information Protection, Compliance)
• Manage identity and access governance.
• Conduct security assessments, threat modeling, and risk analysis.
• Define security policies, standards, and best practices.
• Support incident response and security investigations.
• Collaborate with cloud, infrastructure, and SOC teams.
• Provide technical leadership and security guidance to stakeholders.

Job Requirements

Experience: Minimum 5 years in M365 Security Architecture. Must have a proven track record of designing security for environments exceeding 10,000 users.

Architecture Mastery: Expert in translating business requirements into technical blueprints, specifically focusing on Hybrid Identity and Cloud Security posture.

Critical Skillset: Advanced experience with Ping Federated Identity and its integration with Entra ID.

Must-Have Technical Expertise (M365 Components)

• Encryption & Compliance: Information Protection & DLP (DSC01).
• Defender Suite (Design/Strategy): Endpoint (TP01), Identity (TP02), Office (TP03), Cloud Apps (TP04), and Servers (TP05).
• Governance: Data Lifecycle Management (DSC02), eDiscovery (DCS03), and Auditing (DSC04).