Microsoft 365 Security & Compliance Architect

BCforward; Charlotte (NC); On-site; USD 128,000 - 138,000; Full time

Job summary

BCforward is seeking a Microsoft 365 Security & Compliance Architect to join our team in Addison, TX. The role focuses on designing and implementing secure, compliant, and scalable Microsoft 365 solutions across the enterprise.

You will drive governance, data protection, and information governance while partnering with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to meet regulatory requirements. This is a contract position with an 11-month horizon and onsite requirements.

Qualifications

• Bachelor's degree in CS/engineering or equivalent hands-on experience.
• 10+ years in architecture across email and collaboration services.
• Expert knowledge of Microsoft 365 and related services.
• Strong IAM, DLP, and information protection expertise.
• Proven design and architecture documentation skills.

Responsibilities

• Lead architecture, design, and implementation of Microsoft 365 security, compliance, governance, and risk management solutions across the enterprise.
• Define and maintain frameworks aligned with regulatory requirements, corporate policies, and industry best practices.
• Architect cloud-based productivity solutions with focus on data protection, information governance, identity security, automation, scalability, and resiliency.
• Provide architectural leadership for Microsoft 365 services, including controls, monitoring, audit readiness, and governance processes.
• Partner with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to meet enterprise and regulatory requirements.
• Develop and maintain architectural standards, design artifacts, roadmaps, and governance documentation.
• Assess existing platforms and processes, identify gaps, and recommend remediation strategies and long-term improvements.
• Provide leadership on Microsoft Purview, DLP, Information Protection, Records Management, Insider Risk, eDiscovery, and Compliance Manager.
• Establish engineering practices that support secure delivery, operational effectiveness, and continuous compliance.
• Support proof-of-concepts, emerging technologies, enterprise transformations, and multi-year programs.
• Drive automation and control implementation to enhance monitoring, reporting, policy enforcement, and governance across Microsoft 365.
• Advise leadership on security strategy, compliance requirements, risk management, and technology investments.

Skills

Microsoft 365 Security

DLP & Information Protection

IAM & Conditional Access

PowerShell scripting

Active Directory

ITIL & Agile

Executive communication

Education

Bachelor's degree in Computer Science / related field

10+ years in enterprise architecture for email & collaboration

MCP or higher certification

Tools

Microsoft 365 suite

Purview / Compliance Manager

Job description

Job Title: Microsoft 365 Security & Compliance Architect

Location: Addison, TX

Duration: Contract - 11 months

Pay Range: $93.08/hr (W2)

Job ID: 410487

About BCforward

BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long‑term relationships and delivering excellence through innovation, collaboration, and integrity.

Job Description

We are seeking a Microsoft 365 Security & Compliance Architect to join our dynamic team. The ideal candidate will have strong experience in Microsoft 365 security, compliance, governance, and cloud service engineering and a proven ability to design and implement secure, compliant, and scalable enterprise solutions aligned to regulatory and corporate standards.

Responsibilities

• Lead architecture, design, and implementation of Microsoft 365 security, compliance, governance, and risk management solutions across the enterprise.
• Define and maintain frameworks aligned with regulatory requirements, corporate policies, and industry best practices.
• Architect cloud‑based productivity solutions with focus on data protection, information governance, identity security, automation, scalability, and resiliency.
• Provide architectural leadership for Microsoft 365 services, including controls, monitoring, audit readiness, and governance processes.
• Partner with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to meet enterprise and regulatory requirements.
• Develop and maintain architectural standards, design artifacts, roadmaps, and governance documentation.
• Assess existing platforms and processes, identify gaps, and recommend remediation strategies and long‑term improvements.
• Provide leadership on Microsoft Purview, DLP, Information Protection, Records Management, Insider Risk, eDiscovery, and Compliance Manager.
• Establish engineering practices that support secure delivery, operational effectiveness, and continuous compliance.
• Support proof‑of‑concepts, emerging technologies, enterprise transformations, and multi‑year programs.
• Drive automation and control implementation to enhance monitoring, reporting, policy enforcement, and governance across Microsoft 365.
• Advise leadership on security strategy, compliance requirements, risk management, and technology investments.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Technology, Engineering, or equivalent hands‑on experience.
• 10+ years of architecture and engineering experience across email and collaboration services.
• Expert knowledge of Microsoft 365 and related collaboration services, cloud and on‑premise.
• Expertise in Directory services, Conditional Access, IAM, Security and Compliance, DLP, and Data Classification.
• Strong knowledge of Active Directory, network fundamentals (DNS/DHCP, routing), and PowerShell scripting.
• Proven design and solution engineering across collaboration technologies with emphasis on DLP deployment and administration.
• Ability to translate business needs into requirements and technical artifacts and create architecture documents and data flows.
• Experience with ITIL foundational concepts and Agile methodologies.
• Strong organizational, analytical, written, and verbal communication skills.
• MCP or higher certification.

Preferred Skills

• Enterprise security experience including TLS, SMTP over TLS, certificates, HSM, and NIST standards.
• Experience with Microsoft Windows environments and M365 services such as OneDrive, SharePoint Online, Exchange Online, and Teams.
• Knowledge of authentication mechanisms including domain authentication, OAuth/Modern Authentication, and Kerberos.
• Familiarity with load balancers, proxies, and firewalls in secure network architectures.
• Understanding of financial regulatory, legal, and compliance requirements.

Why BCforward?

• Competitive compensation and benefits.
• Opportunities for growth with global clients.
• A supportive, inclusive culture that values innovation and people.
• Exposure to cutting‑edge technologies and projects.

Additional Details

Onsite presence is required. Target start is November and may accelerate based on project needs. This role supports the CaP End of Life Enterprise Applications Remediation program within Productivity Architecture. Hours per day: 8. Labor type: Technical.

About Our Commitment

BCforward is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees.

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status.