Security solution Architect

Security solution Architect
Location- Houston, Remote
Long term
Responsibilities & Required Qualifications
Core Responsibilities
Required Qualifications
Own end-to-end security posture across a portfolio of enterprise clients, acting as primary escalation point and trusted advisor
10+ years of progressive cybersecurity experience, with at least 5 years in a client-facing consulting or managed security services role
Architect and deliver Microsoft-native security solutions spanning identity, endpoint, cloud, SIEM, and compliance domains
Deep hands-on expertise with Microsoft Sentinel (KQL, analytics rules, SOAR playbooks) and Defender XDR suite
Lead threat detection, incident response, and vulnerability management programs using Sentinel, Defender XDR, and Entra ID
Strong command of Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows
Drive security assessments, risk reporting, and roadmap planning aligned to client business objectives and regulatory requirements
Experience securing Microsoft 365 environments: Defender for Office 365, Purview, DLP, and Compliance Manager
Mentor and manage a team of security engineers; run QBRs and executive briefings with client stakeholders
Proficiency with Microsoft Intune for endpoint management and security policy enforcement
Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust adoption plans
Demonstrated experience managing multiple client accounts with accountability for SLAs and outcomes
Collaborate with sales and pre-sales on security proposals, SOW scoping, and capability demonstrations
Strong executive communication skills; ability to translate technical risk to business language
Stay current on emerging threats, Microsoft product releases, and frameworks (NIST, CIS, ISO 27001)
Relevant certifications: SC-100, SC-200, SC-300, AZ-500, MS-500 (one or more required)
Microsoft Technology Scope
Defender & SIEM
Microsoft Sentinel
Defender XDR
Defender for Endpoint
Defender for Cloud
Defender for Identity
Defender for Office 365
Identity & Access Management
Microsoft Entra ID
Entra PIM
Identity Governance
Conditional Access
Lifecycle Workflows
Entra Agent ID
Compliance, Productivity & AI
Microsoft Purview
Microsoft Intune
Security Copilot
M365 E5 Security
Microsoft Defender for Cloud Apps
Azure Policy
Supporting Stack & Skills
Azure Security Center
KQL
Logic Apps / SOAR
MS Graph API
Lighthouse (Multi-tenant)
PowerShell / Azure CLI
Preferred Qualifications
Preferred Qualifications
Microsoft MVP in Security or demonstrated community leadership and contributions
Experience with Security Copilot agent development or AI-assisted security operations
Familiarity with post-quantum cryptography, Zero Trust Network Access (ZTNA), and SASE frameworks
Prior experience with tenant-to-tenant migrations or large-scale M365 consolidations
Knowledge of CrowdStrike, F5, Palo Alto and integration patterns with the Microsoft stack
Background in regulated industries: healthcare, financial services, energy, or government

Work arrangement
Yes