Cloud Solution Architecture - Security

Overview With more than 45,000 employees and partners worldwide, the Customer Experience and Success (CE&S) organization is on a mission to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft’s products and services, ignited by our people and culture.

We drive cross-company alignment and execution, ensuring that we consistently exceed customers’ expectations in every interaction, whether in-product, digital, or human-centered. CE&S is responsible for all up services across the company, including consulting, customer success, and support across Microsoft’s portfolio of solutions and products.

Join CE&S and help us accelerate AI transformation for our customers and the world. Support Mission Critical (SfMC) is a team delivering dedicated support to Microsoft’s top tier customers using Microsoft technology to build true Mission Critical applications to run their business.

These Mission Critical customers are technically savvy and have good expertise in Microsoft technologies they use. The kinds of customers we deal with are companies building the banking backbones, stock exchanges and large government entities.

Within the SfMC team, we support multiple technologies and multiple products being used by our customers via a single team. We are building a dedicated team with diversified skill set so we can deliver an excelled support experience to our customers, all under one roof.

CSA’s on our team usually come with a depth of experience in one or two technologies. Within SMC, you will have that opportunity to expand your skill set, learn new technologies and grow your leadership in the technology you excel at, all without being isolated into a particular feature of a particular product.

You will deal with high profile customers directly under the radar of executive management and may occasionally get an email or two from them directly! Microsoft’s mission is to empower every person and every organization on the planet to achieve more.

As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities * Provide architectural reviews and technical guidance to Support for Mission Critical (SfMC) customers, focusing on the reliability, security, and performance. * Take end-to-end ownership and accountability of technical deliverables, ensuring alignment with customer business outcomes and Microsoft’s best practices. * Identify architectural risks, design gaps, and operational inefficiencies across services. * Engage with SfMC stakeholders to drive architectural validation, incident prevention, and workload health improvements through proactive engagements and deep technical assessments. * Collaborate closely with Microsoft engineering and support teams to address escalations, share feedback, and align solutions with platform evolution. * Drive creation and reusability of IP including scripts, tools, and technical documentation to support scalable SfMC engagements. * Act as a trusted advisor to customer architects and engineers, influencing long-term technical strategy for stability, resilience, and innovation.

Qualifications Preferred Qualifications: Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 8+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR equivalent experience. 5+ years experience working in a customer-facing role (e.g., internal and/or external). 5+ years experience working on technical projects.

Technical Certification in Cloud (e.g., Azure, security certifications). Additional Required Qualifications: Technical Expertise ○ Deep knowledge of Microsoft Entra ID (Azure AD): tenant governance, authentication modernization, conditional access, privileged access workstations.

Hands-on Skills ○ Implementation of Zero Trust principles and identity hardening. ○ Familiarity with Azure networking, multi-region deployments, and compliance frameworks. PowerShell scripting for automation and governance. Experience designing, implementing, and operating enterprise Security solutions (EntraID, Access Management (IAM), Sentinel).

Deep understanding of certificates and PKI, ADFS including ADCS, certificate lifecycle management, and secure issuance Entra ID Connect, AD recovery. Experience on designing, implementing, and securing Entra ID, including directory architecture, identity lifecycle, authentication, and access management.

Experience on identity security, governance, and Zero Trust controls including Conditional Access, MFA, Identity Protection, Privileged Identity Management (PIM), Access Reviews, passwordless solutions, and External ID (B2B/B2C/CIAM). Expertise in modern application integration, including SAML, OAuth2.0, OpenID Connect, SCIM, and App Proxy for secure hybrid app publishing.

Experience on threat protection and monitoring using Microsoft security tools, including MDI, Microsoft Defender for Cloud, Azure Monitor / Log Analytics, Sentinels, and adherence to CIS / SCM baselines. Experience in Azure Infrastructure: resiliency design, landing zone governance, HA/DR architecture, cost optimization, and security posture improvements.

Familiarity with CAF (Cloud Adoption Framework) landing zones, SAF (Security Adoption framework MDE,MDO, MDI, MDCA, Sentinel Certifications ○ Microsoft Certified: SC-401, SC-100, SC-300, SC-900 This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.