Senior Microsoft 365 / Power Platform Security Architect

BCforward; Pennington (NJ); On-site; USD 124,000 - 138,000; Full time

Job summary

BCforward is seeking a Senior Microsoft 365/Power Platform Security Architect to design, secure, and govern enterprise low-code solutions. The role focuses on Microsoft 365 services, Power Apps, Power Automate, and robust cybersecurity practices.

The candidate will lead architecture sessions, drive secure integrations, and ensure compliance with regulatory requirements while delivering scalable, reliable solutions onsite in Pennington and Addison. Onsite required for 12 months.

Qualifications

• Extensive Microsoft 365 expertise across Teams, SharePoint Online, OneDrive, Exchange Online and Power Platform administration.
• Strong enterprise architecture skills for design, scalability, resiliency, performance, and secure development.
• Cybersecurity expertise: IAM, Zero Trust, PAM, authentication models, security-by-design practices.
• Hands-on with Defender, Purview, DLP, Information Protection, eDiscovery, Insider Risk, CA, retention policies.
• Governance of secure low-code/no-code solutions aligned to risk frameworks.
• Access control proficiency: RBAC, SSO, OAuth, SAML, MFA, secure API integrations.
• Experience with CRM/ERP/cloud platforms via Microsoft Graph API and REST APIs.
• Risk management across the lifecycle including threat mitigation and secure data practices.
• Operational excellence in monitoring, performance tuning, troubleshooting, reliability.

Responsibilities

• Translate business needs into Power Apps/Power Automate solutions within Microsoft 365.
• Lead architecture design for secure, scalable integrations with governance and user access controls.
• Develop proofs of concept to validate requirements and fit.
• Provide implementation guidance and adoption strategies for Power Apps/Automate.
• Advocate best practices for Power Platform use, including responsible AI and ethics.
• Offer escalation support and troubleshoot deployments.
• Ensure solutions meet enterprise security standards and Zero Trust principles.

Skills

Microsoft 365

Power Platform

Cybersecurity

IAM

Zero Trust

RBAC

SSO

OAuth

MFA

Microsoft Defender

Purview

eDiscovery

Compliance

Microsoft Graph API

REST APIs

DevSecOps

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field

Tools

PowerShell

Python

Bash

CI/CD tools

Security tooling

Job description

Job Title: Senior Microsoft 365 / Power Platform Security Architect

Location: Pennington, NJ / Addison, TX – Onsite required.

Duration: Contract – 12 months

Pay Range: $93.08/hr (W2)

Job ID: 410997

About BCforward

BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.

Job Description

We are seeking a Microsoft 365 Power Platforms Architect to join our dynamic team. The ideal candidate will have strong experience in Microsoft 365, Power Platform, and cybersecurity and a proven ability to design, implement, secure, and govern enterprise low-code solutions.

Responsibilities

• Engage stakeholders to translate business needs into Power Apps and Power Automate solutions across Microsoft 365 services.
• Lead architecture design sessions for secure, scalable integrations with a focus on governance and user access controls.
• Develop proofs of concept and demonstrations to validate requirements and solution fit.
• Provide implementation guidance, configuration leadership, and adoption strategies for Power Apps and Power Automate.
• Advocate best practices for Power Platform usage, including responsible AI and ethical considerations.
• Offer escalation support and troubleshoot deployment and operational issues.
• Ensure solutions align with enterprise security standards, Zero Trust principles, and regulatory requirements.

Required Skills & Qualifications

• Extensive Microsoft 365 expertise: Teams, SharePoint Online, OneDrive, Exchange Online, Exchange 2019 integration, Power Apps, Power Automate, Power BI, and Power Platform administration.
• Strong enterprise architecture skills, including solution design, scalability, resiliency, performance optimization, and secure development.
• Cybersecurity expertise: IAM, Zero Trust, PAM, authentication and authorization models, and security-by-design practices.
• Hands-on with Microsoft security and compliance: Microsoft Defender, Microsoft Purview, DLP, Information Protection, eDiscovery, Insider Risk, Conditional Access, and retention policies.
• Governance of secure low-code/no-code solutions aligned to risk and regulatory frameworks.
• Access control proficiency: RBAC, SSO, OAuth, SAML, MFA, and secure API integrations.
• Integration experience with CRM, ERP, cloud platforms, and third-party apps using Microsoft Graph API, REST APIs, and related technologies.
• Risk management across the solution lifecycle, including threat mitigation and secure data practices.
• Operational excellence in monitoring, performance tuning, troubleshooting, and reliability management.
• Knowledge of NIST, ISO 27001, SOC 2, GDPR, CIS Controls, FINRA, SEC, and related financial services regulations.
• Proficiency with automation and scripting such as PowerShell, Python, or Bash.
• Experience with DevSecOps, CI/CD pipelines, and secure deployment practices preferred.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent experience.
• 5 years in Microsoft 365 architecture with 3 years in design and implementation roles.

Preferred Skills

• Applied Power Apps and Power Automate integrations with CRM, ERP, and third-party applications.
• Experience in industries requiring secure document exchange such as financial services, legal, or healthcare.
• API-based solution development including Microsoft Graph API.
• Familiarity with Microsoft 365 compliance features including DLP, eDiscovery, and regulated message capture.
• Microsoft Certified: Security, Compliance, and Identity Fundamentals or a relevant cloud security certification.

Why BCforward?

At BCforward, we believe in advancing lives and careers. When you join our team, you gain access to:

• Competitive compensation and benefits
• Opportunities for growth with global clients
• A supportive, inclusive culture that values innovation and people
• Exposure to cutting-edge technologies and projects

Additional Details

Onsite attendance is required. Target start in October or November. GLIDER assessment ID will be used during evaluation. Project: EET M365 Base Funding.

About Our Commitment

BCforward is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status.