Director - Security Architecture
First seen by Alion on Sep 19, 2026.
Responsibilities:
- Own end-to-end target security architecture across Microsoft Entra ID, Microsoft Defender, Microsoft 365 Defender XDR, and Purview.
- Define enterprise-wide standards for architecture.
- Lead security architects, consultants, engineers, and project managers.
- Guide Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
- Review and approve configuration baselines, SOPs, runbooks, health, optimization reports, and KPI dashboards.
- Lead architecture-focused knowledge transfer sessions.
- Develop reusable architecture assets and best practices.
Requirements:
- 15+ years of cybersecurity experience.
- 8+ years in Enterprise Security Architecture roles.
- Proven experience leading large-scale enterprise security transformation programs.
- Strong hands-on expertise in Microsoft E5 Security and Microsoft Purview.
- Experience architecting and delivering implementations for 10,000+ endpoints/servers in multi-region environments.
- Experience managing leadership-level stakeholders, including CISOs, CIOs, Steering Committees, and Board Members.
- Ability to operate both at executive and hands-on technical levels.
- Expertise in RBAC, Zero Trust, XDR Correlation Models, Data, and Security.
- Must have experience leading migrations/consolidations from legacy security tools such as CrowdStrike, Checkpoint EDR, Symantec DLP, and Sophos into Microsoft-native security platforms.
- Must have strong experience designing Enterprise Sensitivity Label Taxonomy, Data Governance Frameworks, Information Protection Strategy, DLP Control Frameworks, Regulatory Compliance Controls, Adaptive Protection Models, and Insider Risk Controls.
- Troubleshooting critical production issues.
- Resolving security configuration challenges.
- Supporting stabilization and hypercare phases.
- Acting as technical escalation point during complex deployments.
Candidate Profile:
- Acting as trusted advisor to CISOs and executive leadership.
- Leading board-level and steering committee discussions.
- Presenting architecture decisions and risk trade-offs.
- Managing scope, risk acceptance, escalations, and delivery challenges.
- Conducting workshops with Business Units and Compliance teams.
- Translating security architecture into business risk language.
- Wave-based deployment methodologies.
- Enterprise rollout governance.
- Hypercare and stabilization models.
- Stage-gate assessments.
- Architecture compliance reviews.
- Testing and validation sign-offs.
- Knowledge Transfer governance.
- Identity Security: Entra.
- Endpoint Security: Microsoft Defender for Endpoint (MDE).
- Email Security: Microsoft Defender for Office 365 (MDO).
- Cloud App Security: MDCA / MCAS.
- Identity Threat Detection: MDI Extended Detection & Response.
- Microsoft 365 Defender XDR.
- Microsoft Certified: Cybersecurity Architect Expert (SC-100), SC-200, SC-300, SC-400, CISSP, CISM, TOGAF.
- Experience within the Logistics environments and Critical OT/IT.
Skills
Cyber Security, Data Governance, IT Risk Management, IT Security, Information Security