Sr Cloud Solution Architect - Security
Microsoft
Sr Cloud Solution Architect - Security
Multiple Locations, United States
Save
Overview
With more than 45,000 employees and partners worldwide, the Customer Experience and Success (CE&S) organization is on a mission to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft’s products and services, ignited by our people and culture. We drive cross-company alignment and execution, ensuring that we consistently exceed customers’ expectations in every interaction, whether in-product, digital, or human-centered. CE&S is responsible for all up services across the company, including consulting, customer success, and support across Microsoft’s portfolio of solutions and products. Join CE&S and help us accelerate AI transformation for our customers and the world.
The Global Customer Success (GCS) organization, an organization within CE&S, is leading the effort to enable customer success on the Microsoft Cloud by harnessing leading, AI-powered capabilities and human expertise to deliver innovation solutions that accelerate business value, drive operational excellence and nurture long term loyalty.
The Sr Cloud Solution Architect - Security proactively acts as the voice of the customer/partner and internal communities leveraging relevant insights from feedback tools and systems. Identifies and/or translates customer/partner problems into industry solutions. Drives self and guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Proactively identifies, escalates, and mitigates blockers using appropriate tools. Delivers solutions in line with company methodologies, ensuring proven practices and patterns are followed. Proactively identifies new opportunities for Consumption, Usage & Unified expansion at scale. Operates according to required operational excellence and proven practice standards throughout all sales stages/activities/tools of record. Leverages market insights and demand signals. Contributes to leading virtual teams using knowledge of Microsoft architectures and their context in the competitive landscape. Proactively identifies gaps that enable solutions to scale across customers.
This role is flexible in that you can work up to 100% from home.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Qualifications
Required/minimum qualifications
- Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 4+ years experience in cloud security architecture, cybersecurity strategy, infrastructure design, or enterprise identity and access management, cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, technology solutions, architecture, and/or consulting
- OR equivalent experience.
- 3+ years of hands-on experience with Microsoft Entra ID, Active Directory (AD), and Microsoft Purview, including:
- Designing and implementing identity governance and access control frameworks
- Deploying Purview for data classification, DLP, IRM, and compliance scenarios
- Integrating hybrid identity solutions and managing federated authentication (e.g., ADFS, PKI)
- 2+ years of experience in customer-facing roles, such as technical consulting, solution architecture, or enterprise security delivery.
- Security Certifications: Must hold or be actively pursuing SC-100 (Microsoft Cybersecurity Architect) or equivalent (e.g., CISSP, AZ-500, SC-200). SC-100 is required if other security certifications are already held7.
Other Requirements
- Microsoft is unable to sponsor a work visa for this role due to the nature of the role’s job duties.
Citizenship & Citizenship Verification:
This role will require access to information that is controlled for export under export control regulations, potentially under the U.S.
International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the exportcontrolled information. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Lawful permanent residents, refugees, and asylees may verify status using other documents, where applicable.
Citizenship & Citizenship Verification:
This position requires verification of citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport.
Additional or preferred qualifications
- Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 8+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR Master's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 6+ years experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting OR equivalent experience.
- 4+ years experience working in a customer-facing role (e.g., internal and/or external).
- 4+ years experience working on technical projects.
- Demonstrated ability to lead technical engagements with enterprise customers, influence C-level stakeholders, and drive adoption of Microsoft’s security portfolio (e.g., Defender, Sentinel, Entra)
- Experience with data security architecture and AI risk mitigation strategies, especially in the context of Microsoft 365 Copilot and Purview
- Ability to meet Microsoft, customer, and/or government security screening requirements, including verification of citizenship or protected status for access to export-controlled information.
- Advanced Security Architecture Experience - Proven ability to design and implement enterprise-grade security architectures using Microsoft Entra ID, AD, and Purview. Must demonstrate experience in securing hybrid environments, including federated identity models, conditional access policies, and data governance frameworks.
- Expertise in Microsoft Security and Compliance Solutions - Hands-on experience with Microsoft 365 Defender, Sentinel, and Purview Information Protection. Must be capable of deploying and operationalizing solutions such as auto-labeling, Insider Risk Management, and Data Loss Prevention (DLP) across Microsoft 365 workloads.
- Security Copilot and AI Risk Mitigation Readiness - Familiarity with Microsoft Security Copilot and its integration with Purview and Defender solutions. Ability to assess and mitigate AI-related risks in enterprise environments, including secure deployment of M365 Copilot and configuration of data security controls.
- Skilling and Certification Alignment - Completion of advanced skilling paths such as SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), and Microsoft Defender for Cloud Ninja training. Must demonstrate proficiency in Level 300–400 technical scenarios and maintain current certifications aligned with Microsoft’s Security Cloud strategy.
- Designing and implementing identity governance and access control frameworks and Deploying Purview for data classification, DLP, IRM, and compliance scenarios
- Integrating hybrid identity solutions and managing federated authentication (e.g., ADFS, PKI)
Cloud Solution Architecture IC4 - The typical base pay range for this role across the U.S. is USD $106,400 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $137,600 - $222,600 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
Microsoft will accept applications for the role until November 11, 2025.
#CES #GCS
Responsibilities
Business Impact
- Operates according to required operational excellence and proven practice standards throughout all sales stages/activities/tools of record (e.g., pipeline updates, time tracking). Collaborates across Microsoft and customer/partner teams through on-strategy delivery to achieve customer/partner objectives and increase customer/partner satisfaction. Proactively manages business and technical risks, adapts methodology and applies governance principles to identify, communicate, and minimize business and technical risks. Executes work in compliance with industry and Microsoft guidelines and procedures. Continuously prioritizes among competing demands in their work and identifies where impact occurs with customers, ensuring alignment with business priorities and goals.
- Delivers solutions in line with company methodologies (e.g., product offerings such as value-based deliverables [VBDs], advice, training, technical validation), ensuring proven practices and patterns are followed to prepare customers for operational readiness and achievement of their business goals and targets. Leveraging knowledge of change management proven practices and/or involving the change management team, proactively helps the customer deploy for long-term organizational adoption to increase customer satisfaction and drive consumption/usage. Guides customers/partners towards a well-architected (e.g., secure, resilient, artificial intelligence [AI]-enabled), and cost- and performance-optimized solution to increase retention and expansion opportunities. Provides feedback to Unified Delivery Team on VBDs to refine and further develop content.
- Proactively identifies new opportunities for Consumption, Usage & Unified expansion (especially Enhanced Solutions) at scale based on business value to customer/partner and clear understanding of the Microsoft value proposition for supported platforms to empower cloud success, foster and strengthen security and resiliency, and drive AI innovation. Actively listens to and respectfully challenges customers/partners, building trust to then advocate for alternative architectures/solutions/approaches that shape and/or enhance customer requirements. Identifies, and evaluates industry trends (e.g., customer industry verticals, information technology [IT] industry), gathers customer/partner insights (e.g., feedback around technical preferences, environments, business needs, competitive landscape), and maps existing architecture and digital transformation solutions to customer/partner business outcomes. Proactively captures opportunities in appropriate systems, processes, and tools, working collaboratively across the organization to execute on opportunities aligned with Microsoft's Customer Engagement Model.
- Proactively identifies, escalates, and mitigates blockers using appropriate tools and processes to accelerate solution deployment, value realization and usage/consumption. Applies business, technical, industry, and/or enterprise knowledge to architecture or support projects to meet business and information technology (IT) requirements and resolve identified constraints.
Customer Centricity
- Proactively acts as the voice of the customer/partner, sharing ideas, feedback, insights, success stories and strategic/technical input with Engineering teams, Product Offerings teams and internal communities leveraging relevant insights from feedback tools and systems. Identifies patterns of feedback across customers/partners/territories/industries and leverages them to develop strategic and actionable insights. Presents business cases to program managers to influence product roadmaps, decision making, bug fix prioritization, and own and drive initiatives as appropriate.
- Identifies and/or translates customer/partner problems into industry solutions aligned with Microsoft product and platform strategy, and explains why and/or how they meet customer/partner outcomes and return on investment (ROI) goals (e.g., via proof of concept, minimally viable product [MVP], rapid prototype) relative to competitive offerings. Proactively helps the customer/partner adopt and use Microsoft product/platform strategy-aligned (cross-solution area) solutions. Builds relationships with technical decision makers (TDMs), and helps build the bridge between TDMs and business decision makers (BDMs). Independently interacts as needed with customers/partners' Chief Information Officer (CIO), Chief Information Security Officer (CISO) and other C-level (CXO) roles to bridge understanding of security, compliance, operational and risk requirements across BDMs, TDMs, CIO and CISO teams, appropriately engaging additional subject matter experts when deeper expertise is required.
- Drives self and guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Defines customer/partner conditions of success by leveraging an understanding of customer goals. Anticipates and addresses customer/partner dissatisfaction and unmet needs, and executes strategies to improve customer experience, value realization, and acceleration of transformation.
Partner Specialization
- Identifies and prioritizes several opportunities that align with revenue goals, and orchestrates growth of solution utilization pipeline with partners. Provides assistance with partner and sales teams to bring clarity to specific opportunities through proof of concept and technical pre-sales support.
- Understands solution area-specific market opportunities (e.g., competitor insights) and collaborates with Global Partner Solutions (GPS) business stakeholders to lead and execute initiatives to translate opportunities into actions. Proactively guides and supports partners in developing repeatable offerings, practices, products, and solutions. Advises the partner throughout initial strategic customer implementations.
Technical Leadership
- Leverages market insights and demand signals to assist leadership in identifying relevant areas in which to drive up-skilling and/or accreditations based on demand. Role models technical readiness, both depth-aligned to solution area priorities and breadth-aligned to Customer Success Unit (CSU)/corporate initiatives (e.g., security, resilience, AI), and influences team to drive their own technical readiness. Acts as a mentor, leading readiness and upskilling activities in the team/organization by educating colleagues on technical and non-technical concepts and sharing proven practices.
- Proactively identifies gaps through delivery, communicates those gaps to relevant team members and internal/external stakeholders, and connects gaps and patterns across business and technology areas that drive changes and improvements to products, IP (both existing and new), technologies, and/or processes/practices that enable solutions to scale across customers. Contributes to the development and modification of Microsoft's structured frameworks and methodologies. Provides thought leadership and innovation to customers/partners and internal communities at the local level.
- Contributes to leading virtual teams (v-teams) around technologies and customer/partner challenges, and shares ideas, insights, and strategic, technical input with technical teams, internal communities across the field, and the larger virtual team across Microsoft using knowledge of Microsoft architectures and their context in the competitive landscape. Demonstrates strong industry knowledge and increases recognition for Microsoft solutions by contributing to and sometimes leading presentations and engagements with external and internal audiences (e.g., Tech Connect, Build, Ignite) Contributes to intellectual property (IP) and identifies patterns where no IP exists (e.g., CoPilot and AI scenarios) to help build scalable and repeatable models.
- Participates in external technical and non-technical community events (e.g., conferences, seminars, technical meetups, webcasts, blogs, hackathons) that elevate the Microsoft brand and shares learnings across internal teams.
Other