Cloud Solution Architect – Security

Invoke; Houston (TX); Remote; USD 140,000 - 160,000; Full time

Job summary

Invoke seeks a Cloud Solution Architect to guide customers from security strategy through implementation across cloud, hybrid, and AI environments. You will partner with business and IT leaders to assess security posture, shape roadmaps, and define policies aligned to Zero Trust, NIST, and CIS.

In delivery, you’ll design and deploy Defender XDR, Sentinel, Purview, and Agent 365 integrations, extending Entra and Purview controls to AI agents.

Qualifications

• 5+ years in IT consulting or professional services.
• 2+ years as Architect/Consultant for Microsoft Security solutions.
• Experience advising executives on security strategy and roadmaps.
• Knowledge of AI security risks and Microsoft Agent 365 features.

Responsibilities

• Lead customer-facing engagements on large security projects.
• Design and deploy Defender XDR, Sentinel, and cloud security controls.
• Advise on Zero Trust, NIST, CIS alignment.
• Guide adoption of security technologies with change management.
• Deliver governance and programmatic security improvements.

Skills

Executive communication

Security strategy

Threat modeling

Cloud security

Architectural design

Tools

Defender XDR

Microsoft Sentinel

Azure Defender

Microsoft Purview

PowerShell

KQL

Microsoft Entra

Job description

Cloud Solution Architect – Security

Location: United States (Remote) – Houston, TX preferred

Invoke, the 2025 Microsoft Identity Partner of the Year and a top 10 U.S. Microsoft Security partner, is seeking a Cloud Solution Architect to guide customers from security strategy through implementation across cloud and hybrid environments, including the AI agents operating within them. As a trusted advisor, you’ll partner with business and IT leaders to assess security posture, shape roadmaps and target operating models, and define the policies, processes, and metrics that align to frameworks such as Zero Trust, NIST, and CIS. In delivery, you’ll design and deploy Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Microsoft Security Copilot agents, and exposure management solutions, and use Microsoft Agent 365 to extend Microsoft Entra, Defender, and Purview controls to AI agents. The ideal candidate is equally comfortable advising executives and getting hands-on, combining deep technical expertise with practical governance design and change management skills.

Responsibilities

In the Cloud Solution Architect role, you will lead customer-facing engagements on some of the largest and most advanced security projects, guiding organizations as they modernize security operations and adopt Microsoft security capabilities across cloud, hybrid, and AI environments. Key responsibilities include:

• Security Strategy & Advisory: Assess security posture, build roadmaps and target operating models aligned to Zero Trust, NIST, and CIS, and serve as a trusted advisor to business and IT leaders through ongoing guidance.
• Security Operations: Deploy Microsoft Defender XDR and Microsoft Sentinel as a unified SIEM and XDR platform in the Microsoft Defender portal, including transitioning existing Sentinel environments from the Azure portal; build cross-domain detections, automated response, and threat hunting enriched by Microsoft Threat Intelligence; and use Microsoft Security Copilot agents to accelerate triage, investigation, and response.
• Threat Prevention & Hardening: Implement Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender for Cloud to protect endpoints, email, identities, SaaS apps, and multi-cloud workloads, including attack surface reduction, exploit and network protection, and phishing defenses.
• Exposure & Posture Management: Use Microsoft Security Exposure Management, Microsoft Defender Vulnerability Management, and cloud security posture management in Defender for Cloud to map attack paths, identify critical assets, and prioritize remediation of vulnerabilities and misconfigurations.
• Identity Threat Protection: Enforce risk-based Conditional Access with Microsoft Entra ID Protection, deploy phishing-resistant authentication, and apply least-privilege and just-in-time access with Microsoft Entra Privileged Identity Management to reduce credential theft and privilege escalation.
• Data Security: Implement Microsoft Purview Information Protection, Data Loss Prevention, Insider Risk Management, and Data Security Posture Management (DSPM) for AI to protect sensitive data across Microsoft 365, cloud apps, and AI tools.
• AI Agent Governance & Security: Implement Microsoft Agent 365 to discover, register, govern, and monitor enterprise AI agents; extend Microsoft Entra Agent ID, Defender, and Purview controls to agents; and establish lifecycle and operational policies for agent adoption.

You will be responsible for the full engagement life cycle (discovery, analysis, design, implementation, and ongoing advisory) while confidently leading customer workshops and executive discussions.

General Requirements

• A minimum of 5 years of experience in IT consulting or professional services delivery.
• A minimum of 2 years of experience as an Architect or Consultant for Microsoft Security solutions, such as Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra, and Microsoft Purview.
• Experience advising executive and technical stakeholders on security strategy, priorities, and roadmaps.
• Working knowledge of AI security risks and a demonstrated ability to quickly learn and apply newly released Microsoft capabilities, such as Microsoft Agent 365, Microsoft Entra Agent ID, and Microsoft Security Copilot agents.
• Confident presentation, negotiation, and written and verbal communication skills, with the ability to build trusted relationships with customers and partners.
• Highly motivated, collaborative team player with strong organizational and time management skills, able to work autonomously or with a team and help peers succeed.
• Meticulous attention to detail.

Role Specific Requirements

• Proven design, planning, and implementation experience with most of the following: Microsoft Defender XDR (including Defender for Endpoint, Office 365, Identity, and Cloud Apps), Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Security Exposure Management, Microsoft Entra ID Protection, and Microsoft Purview.
• Experience modernizing security operations, such as migrating from legacy SIEM platforms to Microsoft Sentinel or moving Sentinel into the Microsoft Defender portal.
• Experience guiding customers through adoption of new security technologies, including Organizational Change Management and communications for end users, SOC and help desk teams, and stakeholders.
• Proficiency with KQL for hunting and detection engineering, and with PowerShell, Logic Apps, and Microsoft Graph to automate and extend security capabilities.

Role Specific Preferred Experience

• Experience leading security engagements end to end, including scoping, solution design, and supporting technical pre-sales and statements of work.
• Hands-on SOC, incident response, or threat hunting experience, including mapping detections to MITRE ATT&CK.
• Experience applying security frameworks such as Zero Trust, NIST CSF, and CIS Controls to customer environments.
• Experience securing multi-cloud environments (Azure, AWS, and GCP) with Microsoft Defender for Cloud.
• Experience in design, implementation, and adoption of Microsoft Agent 365, Microsoft Entra Agent ID, Microsoft Security Copilot agents, and Microsoft Purview controls for AI (such as Data Security Posture Management for AI).

Recommended Certifications

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Security Administrator Associate (SC-401)

Compensation

• This position is full-time offering a base salary and monetary incentives.
• Base salary range: $140,000 – $160,000 per year
• A generous benefits package is also available to qualifying full-time employees.

About Invoke

Invoke is a 100% Microsoft-focused consulting firm that helps enterprises innovate securely. Our solutions span Security (Identity & Access Management, Threat Protection, Data Security & Governance, Cloud Infrastructure Security, and Endpoint Management) and AI Business Solutions. Our mission is to deliver long-term business value as our customers’ trusted advisor, from strategic planning and roadmaps through implementation and ongoing operations. As one of 100 Microsoft Enterprise System Integrators, a top 10 U.S. Microsoft Security partner, and a Microsoft Intelligent Security Association (MISA) member, Invoke was named the 2025 Microsoft Identity Partner of the Year and the 2026 MISA Security Services Partner of the Year, and was selected as a Microsoft Agent 365 launch partner.

Invoke Core Values

• Be Results-Driven: We prioritize delivering measurable, impactful outcomes through focus, determination, and commitment.
• Lead with Integrity: We operate with trust, ethical decision-making, and reliability, fostering confidence in our commitments and relationships.
• Collaborate to Succeed: We believe in the power of teamwork, open communication, and customer-focused collaboration to achieve shared success.
• Innovate and Improve: We continuously seek creative and scalable ways to refine how we work and deliver value, improving solutions across all areas of the business.
• Solve Problems Effectively: We tackle challenges with creativity, focus, and sustainable solutions, ensuring long-term success and stability.