Microsoft Senior Security Architect - Dallas, TX

· 10-12 years total experience in IT / information security, including last 5+ years in Microsoft security.

· Microsoft Senior Security Architect - M365, Entra ID, Defender & Email Security (10-12 Years)

· Hands-on Microsoft security architect who designs, configures and validates Microsoft 365, Entra ID, Defender and email security for new tenants during a tenant separation.

· Expert: Microsoft Entra ID (Conditional Access, PIM, ID Protection, authentication methods, B2B / cross-tenant access / MTO, app registrations).

· Expert: Microsoft Defender XDR suite - Defender for Endpoint, Defender for Office 365, Defender Vulnerability Management, Defender for Cloud Apps, Defender for Mobile.

· Microsoft 365 / Exchange Online administration: mail flow, connectors, accepted domains, SPF / DKIM / DMARC; third-party email security (Abnormal, Proofpoint or Mimecast) preferred.

· Intune security: baselines, compliance policies, Windows LAPS, EPM, BitLocker.

· Delivered 2+ Microsoft 365 tenant-to-tenant migrations, divestitures or M&A separations (e.g., Quest On Demand Migration, BitTitan, ShareGate).

· PowerShell, Microsoft Graph API, Microsoft365DSC / Maester; working knowledge of Sentinel and KQL.

· Frameworks: NIST CSF 2.0, CIS Microsoft 365 Benchmark, Microsoft Secure Score; regulated / critical-infrastructure experience preferred.

· Client-facing; has led onshore/offshore engineering teams.

· Strong written and verbal English; experience working in onshore/offshore delivery models.

Certifications:

· Required: SC-100 and SC-300 (or MS-102).

· Preferred: SC-200, SC-401, MD-102 or CISSP.