Security Architect/Director
First seen by Alion on Sep 19, 2026.
Job Description :
We are specifically looking for a Director Security Architect.
Key Responsibilities :
- Own end-to-end target security architecture across Microsoft Entra ID, Microsoft Defender, Microsoft 365 Defender XDR, and Microsoft Purview.
- Define enterprise-wide security architecture standards, frameworks, and best practices.
- Lead security architects, consultants, engineers, and project managers across Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
- Review and approve configuration baselines, SOPs, runbooks, health reports, optimization reports, and KPI dashboards.
- Architect and deliver security implementations across 10,000+ endpoints/servers in multi-region environments.
- Lead migrations and consolidations from legacy platforms including CrowdStrike, Check Point, Symantec DLP, and Sophos to Microsoft-native security platforms.
- Design RBAC, Zero Trust, XDR correlation models, identity security, and data security architectures.
- Develop Enterprise Sensitivity Label Taxonomy, Data Governance Frameworks, Information Protection Strategy, DLP Control Frameworks, Regulatory Compliance Controls, Adaptive Protection, and Insider Risk Controls.
- Lead architecture-focused knowledge transfer sessions and develop reusable architecture assets.
- Act as the technical escalation point for critical production issues, security configuration challenges, complex deployments, stabilization, and hypercare.
- Lead architecture workshops with business units, compliance teams, and technical stakeholders.
- Present architecture decisions, risks, and trade-offs to CISOs, CIOs, Steering Committees, and Board-level stakeholders.
- Manage scope, risk acceptance, escalations, and delivery challenges while translating security architecture into business-risk language.
- Establish governance around wave-based deployments, enterprise rollouts, stage-gate assessments, architecture compliance reviews, testing/validation sign-offs, and knowledge transfer.
Technical Expertise :
- Identity Security : Microsoft Entra ID, RBAC, Zero Trust, Microsoft Defender for Identity (MDI).
- Endpoint Security : Microsoft Defender for Endpoint (MDE).
- Email Security : Microsoft Defender for Office 365 (MDO).
- Cloud Security : Microsoft Defender for Cloud / Microsoft Defender for Cloud Apps (MDCA/MCAS).
- XDR : Microsoft 365 Defender XDR and security correlation models.
- Data Security : Microsoft Purview, Sensitivity Labels, DLP, Information Protection, Insider Risk, Data Governance.
- Strong hands-on experience with Microsoft E5 Security and Microsoft Purview.
Requirements :
- 15+ years of overall cybersecurity experience.
- 8+ years in Enterprise Security Architecture roles.
- Proven experience leading large-scale enterprise security transformation programs.
- Experience architecting and delivering security solutions across 10,000+ endpoints/servers in multi-region environments.
- Strong executive stakeholder management experience, including CISOs, CIOs, Steering Committees, and Board Members.
- Ability to operate at both executive/strategic and hands-on technical levels.
- Experience in Logistics environments with exposure to critical OT/IT environments is preferred/required.
- Strong troubleshooting and problem-solving skills for complex security deployments and production environments.
Skills
Security, Security Architect, Cyber Security, Security Head, Entra ID, Microsoft Defender, Microsoft Purview, Endpoint Detection & Response, CISO