- Company Name
- ITBuilders
- Job Title
- Senior Microsoft 365 Identity, Security & Collaboration
- Job Description
-
**Job Title**
Senior Microsoft 365 Identity, Security & Collaboration Architect
**Role Summary**
Design, implement, and manage secure Microsoft 365 and associated identity, collaboration, and security solutions for a large, regulated organization. Lead architecture for hybrid identity, zero‑trust security, PKI, Teams, and advanced threat protection while automating operations and ensuring compliance.
**Expectations**
- Deliver robust, scalable solutions that integrate on‑premises and cloud environments.
- Maintain high availability, disaster recovery, and continuous monitoring.
- Direct cross‑functional teams on security policy, incident response, and telephony migration.
- Produce automation, scripting, and reporting for operational efficiency.
- Hold a valid NATO/EU/Belgian security clearance (minimum SECRET).
**Key Responsibilities**
- **Identity & Access Management** – Design AD & Microsoft Entra ID architecture; hybrid identity, Zero Trust, Conditional Access, MFA, RBAC, PIM, identity governance.
- **AD Tiering & PKI** – Implement tiered AD structure; manage ADCS PKI, certificate templates, HSM integration, and related audits.
- **High Availability & DR** – Define and enforce DR, HA, and monitoring for AD/Entra ID.
- **Third‑Party Integration** – Enable SSO, SCIM provisioning, SAML/OIDC/OAuth for external apps.
- **Security Operations** – Deploy Microsoft Defender XDR (Endpoint, Office 365, Identity, Cloud Apps); collaborate with SOC on detection, incident response, and vulnerability management.
- **Microsoft Teams Administration** – Admin Center & PowerShell configuration; Teams Phone (number provisioning, PSTN, Direct Routing, SBCs, carrier services, Auto Attendant, Call Queues); Teams Meeting Room device setup, firmware, troubleshooting.
- **Automation & Scripting** – Build and maintain PowerShell and Graph API scripts; Logic Apps & Azure Automation workflows; KQL queries for threat hunting and telemetry analysis.
**Required Skills**
- Advanced knowledge of Active Directory, Azure AD, Microsoft Entra ID, and hybrid identity.
- Expertise in Microsoft Defender XDR suite and Microsoft Sentinel.
- Proficient in Microsoft Teams administration, Teams Phone, and meeting device management.
- Strong scripting (PowerShell, Graph API), Logic Apps, Azure Automation, and KQL.
- Experience with PKI, ADCS, HSM, and CA policy.
- Zero‑trust security design, Conditional Access, MFA, RADIUS, and identity governance.
- Ability to design HA/DR for identity services and monitor with Azure Monitor.
- Excellent communication for cross‑functional collaboration.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Systems, or related field.
- Valid NATO/EU/Belgian SECRET security clearance.
- Microsoft Certified: Azure Solutions Architect Expert or equivalent.
- Microsoft Certified: Azure Security Engineer Associate or Defender for Cloud & Identity certification.
- Microsoft Certified: Teams Administrator Associate (preferred).
---