Cybersecurity Architect – Azure & Microsoft Security

Kerry Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Kerry Consulting partners with a leading financial services organisation to appoint a Cybersecurity Architect with deep hands‑on Azure security expertise. You will design, implement and evolve enterprise security across cloud and on‑prem environments, focusing on Azure security, identity protection, endpoint security and threat detection.

You will lead engineering across Azure security, Defender stack, Entra ID and related Microsoft capabilities while driving secure-by-design practices and

Qualifications

• 8–12 years of experience in cybersecurity engineering, security architecture or infrastructure security.
• Hands‑on Azure security architecture and engineering expertise essential; not just governance.
• Strong Microsoft security ecosystem knowledge: Defender for Endpoint, Defender for Cloud, Entra ID, and 365 security capabilities.

Responsibilities

• Design, implement and maintain enterprise security architecture across Microsoft Azure, Microsoft 365 and hybrid environments.
• Lead Azure security architecture and engineering, including landing zones, network security, IAM and privileged access.
• Architect, deploy and optimise security solutions across the Microsoft stack (Defender for Endpoint, Defender for Cloud, Entra ID).
• Drive security technology initiatives across endpoint protection, vulnerability management, SIEM/SOC integration and data protection.
• Partner with infra, cloud and app teams to embed security‑by‑design principles into projects.
• Provide technical leadership from design reviews to implementation and operation handover.
• Conduct security reviews, risk assessments and threat modelling to identify vulnerabilities and controls.
• Support complex security incidents with internal and external stakeholders.

Skills

Azure security architecture

Microsoft Defender for Endpoint

Defender for Cloud

Entra ID

Zero Trust

Privileged access management

Secrets management

SIEM

EDR/XDR

Vulnerability management

Data loss prevention

Threat modelling

Tools

Microsoft Defender for Endpoint

Defender for Cloud

Entra ID

Microsoft 365 security

Job description

We are partnering with an established financial services organisation to appoint a Cybersecurity Architect with strong hands‑on expertise in Microsoft Azure and the Microsoft security ecosystem.

This role will be responsible for designing, implementing and enhancing enterprise security architecture across cloud and on‑premises environments, with a particular focus on Azure cloud security, identity protection, endpoint security and threat detection.

The ideal candidate is a technically strong, hands‑on security architect who can translate security requirements into practical engineering solutions and drive initiatives from design through implementation and operationalisation.

Key Responsibilities:

• Design, implement and maintain enterprise security architecture across Microsoft Azure, Microsoft 365 and hybrid infrastructure environments.
• Lead Azure security architecture and engineering, including secure landing zones, network security, identity and access management, privileged access, secrets management and cloud security posture.
• Architect, deploy and optimise security solutions across the Microsoft security stack, including Microsoft Defender for Endpoint, Defender for Cloud, Microsoft Entra ID and other Microsoft E5 security capabilities.
• Drive security technology implementation and enhancement initiatives across endpoint protection, vulnerability management, network security, SIEM/SOC integration and data loss prevention.
• Partner with infrastructure, cloud and application teams to embed security‑by‑design principles into technology projects and infrastructure changes.
• Provide technical leadership throughout the project lifecycle, from solution design and architecture reviews through implementation, testing and operational handover.
• Conduct security architecture reviews, technical risk assessments and threat modelling to identify vulnerabilities and recommend appropriate controls.
• Support complex security incidents, working with internal stakeholders and external security service providers on technical investigations and remediation.
• Ensure security architecture and controls align with relevant regulatory requirements, industry standards and cybersecurity best practices.

Requirements:

• Approximately 8–12 years of experience in cybersecurity engineering, security architecture or infrastructure security.
• Strong hands‑on experience with Microsoft Azure security architecture and engineering is essential. Candidates should have practical experience designing, configuring and implementing Azure security controls, rather than purely providing governance or architectural oversight.
• Deep technical expertise across the Microsoft security ecosystem, particularly Microsoft Defender for Endpoint, Defender for Cloud, Entra ID, identity protection and Microsoft 365 security capabilities.
• Strong understanding of Azure networking, secure cloud landing zones, Zero Trust architecture, privileged access management and secrets management.
• Experience with enterprise security technologies including EDR/XDR, SIEM, vulnerability management, network segmentation and data protection.
• Proven ability to lead security architecture initiatives through hands‑on implementation, integration and operational delivery.
• Experience securing hybrid cloud environments and working closely with infrastructure and engineering teams.
• Strong problem‑solving skills, technical judgement and ability to design pragmatic, scalable security solutions.
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and business teams.
• Experience within financial services or other highly regulated environments would be advantageous.
• Relevant certifications such as Microsoft Azure Security Engineer Associate (AZ-500), CISSP or CCSP would be beneficial.