Cloud Solution Architecture-Cloud Security

With over 17,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft's end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide differentiated and connected customer experience.  We are looking for a highly motivated and deeply technical Security Cloud Solution Architect (CSA) with broad experience across the Microsoft Security portfolio, including Defender XDR, Microsoft Entra, Microsoft Purview, and Security Copilot, combined with deep hands-on expertise in Microsoft Sentinel and Microsoft Defender for Cloud. The ideal candidate has designed, deployed, and operated these solutions in enterprise production environments and led complex SIEM modernization, cloud security, and customer transformation engagements from strategy and architecture through implementation, adoption, and operational excellence.

Trusted Technical Advisor: Lead security strategy, architecture, and modernization initiatives with deep specialization in Microsoft Sentinel and Microsoft Defender for Cloud. Partner with CISOs, Security Architects, and platform teams to design, deploy, optimize, and scale security solutions across SecOps, Identity, Cloud, Data, and AI Security, driving customer outcomes from strategy through operational excellence.  Microsoft Sentinel: Architect, deploy, and operationalize Microsoft Sentinel, including workspace and multi-tenant design, AMA and DCR architecture, native and custom connectors, Syslog/CEF onboarding, KQL detection engineering, incident workflows, UEBA, threat intelligence, hunting, automation rules, and Logic Apps playbooks.  Microsoft Defender for Cloud: Drive adoption of Defender CSPM and Cloud Workload Protection Platform (CWPP) across servers, containers, Kubernetes, databases, storage, applications, APIs, and AI workloads. Lead secure score improvement, attack path analysis, regulatory compliance, Azure Policy governance, agentless scanning, DevOps security, and multicloud onboarding.  SIEM Modernization: Lead migrations from third-party SIEM platforms to Microsoft Sentinel, including assessment, data onboarding, content translation, parallel-run strategy, validation, and production cutover.  AI Security & Security Operations: Help customers secure and operationalize AI workloads using Security Copilot, Sentinel Data Lake, Defender for AI, Defender for Cloud AI-SPM, DSPM for AI, MCP servers, and agentic security capabilities. Drive AI-assisted detection, investigation, response, governance, and protection of AI applications, agents, and underlying data.  Consumption & Operational Health: Drive production adoption, operational excellence, and long-term value realization through technical consumption plans, workload onboarding, health assessments, cost governance, retention strategies, and blocker removal. Improve detection coverage, automation maturity, secure score, cloud risk posture, alert quality, ingestion efficiency, and overall platform health through continuous optimization reviews and data-driven recommendations.  Unified Security Architecture: Design end-to-end architectures integrating Sentinel and Defender for Cloud with Defender XDR, Microsoft Entra, Microsoft Purview, Security Copilot, and Azure security services to deliver a unified security operations model.  Customer Delivery: Lead architecture workshops, design sessions, proofs of concept, health assessments, and hands-on enablement to accelerate customer success.  Engineering Partnership: Escalate product gaps, influence roadmap direction, capture customer feedback, and develop reusable guidance and best practices for the field and product teams.  Account Collaboration: Partner with account teams, specialists, services, and partners to