M365 & Azure Security Architect

Cornerstone Concilium; Los Angeles (CA); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Benefits

Job summary

Cornerstone Concilium seeks a Microsoft 365 and Azure Architect to lead design, security, and optimization of an enterprise M365/Azure environment for a major public transportation agency in the United States. The role drives identity, cloud security, and hybrid infrastructure with strong governance and regulatory alignment.

The candidate delivers hands-on authority across M365, Azure, and related tools, balancing security posture with procurement, audit, and compliance constraints of a public

Qualifications

• At least 8 years designing and operating enterprise Microsoft environments.
• 5+ years focused on M365 and Azure at scale in regulated settings.
• Proven experience with tenants exceeding 10,000 accounts.

Responsibilities

• Own M365 tenant architecture, policy enforcement, and lifecycle management.
• Lead hybrid identity, Entra ID, and conditional access configurations.
• Governs licensing and entitlements across E3, E5, and add-ons.
• Architect Azure subscriptions, management groups, and policy structures.
• Implement Defender, Sentinel, and Azure Monitor for SOC telemetry.
• Collaborate with Cybersecurity to translate security requirements into platform controls.

Skills

MS 365 & Azure

Security governance

PowerShell scripting

Communication skills

NIST CIS frameworks

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

Microsoft Graph

Exchange Online

Job description

Cornerstone Concilium seeks a Microsoft 365 and Azure Architect to lead design, security, and optimization of an enterprise M365/Azure environment for a major public transportation agency in the United States. The role drives identity, cloud security, and hybrid infrastructure with strong governance and regulatory alignment.

The candidate delivers hands-on authority across M365, Azure, and related tools, balancing security posture with procurement, audit, and compliance constraints of a public