Senior Microsoft 365 Security & Compliance Architect

BCforward; Addison (TX); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation and benefits

Global client exposure

Inclusive culture and collaboration

Exposure to cutting-edge technologies

Job summary

BCforward is seeking a Senior Microsoft 365 Security & Compliance Architect in Addison, TX to lead security, governance, and compliance architecture for enterprise-scale Microsoft 365 deployments. You will drive risk-based design, data protection, and regulatory alignment across cloud and on-prem environments.

Responsibilities include defining security frameworks, leading cross-functional architecture efforts, and delivering scalable compliance solutions using Purview, DLP, and Records

Qualifications

• Bachelor's degree or higher in a technical field.
• 10+ years of architecture/engineering experience in email and collaboration
• Expert knowledge of cloud/on-prem collaboration services and security/compliance
• Experience with DLP, information governance, and data classification
• Strong scripting (PowerShell) and AD skills
• Ability to translate requirements into strategic architectural artifacts
• Excellent English communication and collaboration across teams

Responsibilities

• Lead the architecture, design, and implementation of Microsoft 365 security, compliance, governance, and risk management solutions across the enterprise.
• Define and maintain security and compliance frameworks aligned with regulatory requirements and corporate policies.
• Architect cloud-based productivity solutions focusing on data protection, governance, identity security, and regulatory compliance.
• Provide architectural leadership for Microsoft 365 services including monitoring, audit readiness, and governance processes.
• Partner with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to ensure enterprise alignment.
• Develop and maintain architectural standards, roadmaps, and governance documentation.

Skills

Microsoft 365

Security & Compliance

Architecture

Cloud services

Identity & Access Management

DLP / Information Protection

eDiscovery

Governance

PowerShell scripting

Active Directory

ITIL foundations

Agile methodologies

Education

Bachelor's degree in Computer Science or equivalent

Tools

Microsoft Purview

eDiscovery tools

Compliance Manager

DLP services

PowerShell

Job description

Job Title: Senior Microsoft 365 Security & Compliance ArchitectLocation: Addison, TX (Onsite required)Duration: Contract - 12 monthsPay Range: $80.24/hr (W2)Job ID: 410350

About BCforwardBCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.

Job DescriptionWe are seeking a Microsoft 365 Security & Compliance Architect to join our dynamic team. The ideal candidate will have strong experience in Microsoft 365 architecture, security, compliance, governance, and cloud service engineering and a proven ability to design and implement secure, compliant, and scalable enterprise solutions aligned to regulatory and corporate standards.

Responsibilities:

• Lead the architecture, design, and implementation of Microsoft 365 security, compliance, governance, and risk management solutions across the enterprise.
• Define and maintain security and compliance frameworks aligned with regulatory requirements, corporate policies, and industry best practices.
• Architect cloud-based productivity solutions with focus on data protection, information governance, identity security, regulatory compliance, automation, scalability, and resiliency.
• Provide architectural leadership for Microsoft 365 services, including security controls, compliance capabilities, monitoring, audit readiness, and governance processes.
• Partner with Cyber Security, Risk, Compliance, Legal, Audit, and Technology teams to ensure solutions meet enterprise and regulatory requirements.
• Develop and maintain architectural standards, design artifacts, roadmaps, and governance documentation to support operational excellence and compliance objectives.
• Assess existing platforms and processes, identify security and compliance gaps, and recommend remediation strategies and long-term improvements.
• Provide technical leadership and guidance on Microsoft Purview, DLP, Information Protection, Records Management, Insider Risk, eDiscovery, Compliance Manager, and related M365 compliance services.
• Establish and champion engineering practices that support secure delivery, operational effectiveness, and continuous compliance.
• Support initiatives from proofs of concept and emerging technologies to large-scale enterprise transformations and multi-year programs.
• Drive automation and control implementation to enhance monitoring, reporting, policy enforcement, and governance across M365 services.
• Serve as a trusted advisor to leadership on security strategy, compliance requirements, risk management, and technology investments.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Technology, Engineering, or equivalent hands-on experience.
• 10+ years of architecture and engineering experience across email and collaboration services.
• Expert knowledge of collaboration services in cloud and on-premises environments.
• Expertise in directory services, Conditional Access, Identity and Access Management, security and compliance, data loss prevention, and data classification.
• Working knowledge of Active Directory, DNS/DHCP, routing, and PowerShell scripting.
• Proven design and engineering experience across collaboration technologies at enterprise scale.
• Expertise with data loss prevention services including deployment, configuration, and administration.
• Ability to translate granular requirements into strategic, holistic solutions and artifacts.
• Ability to work independently and collaborate with business and technical teams to define requirements and technical deliverables.
• Strong prioritization, organization, and time management skills with attention to detail.
• Ability to create architecture documents including network and data flows and test scope.
• Strong interpersonal skills with clear verbal and written communication in English.
• Familiarity with ITIL foundations and Agile methodologies.

Preferred Skills:

• Experience with enterprise security including TLS, SMTP over TLS, certificates, HSM, and NIST standards.
• Experience with Microsoft 365 services including OneDrive, SharePoint Online, Exchange Online, and Teams.
• Knowledge of authentication mechanisms such as domain authentication, OAuth/Modern Authentication, and Kerberos.
• Experience with Windows environments and network/security components including load balancers, proxies, and firewalls.
• Understanding of financial regulatory, legal, and compliance requirements.
• MCP or higher certification.

Role Logistics

Engagement: Project CaP End of Life Enterprise Applications Remediation.Start: November target, may accelerate based on readiness.Assessment: GLIDER required. ID will be provided.Worksite: Addison TX8-044-02-18.Hours per Day: 8. Labor Type: Technical.

Why BCforward?

• Competitive compensation and benefits.
• Opportunities for growth with global clients.
• A supportive, inclusive culture that values innovation and people.
• Exposure to cutting-edge technologies and projects.

BCforward is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status.