Cloud Solution Architect – Cybersecurity
Microsoft Federal delivers a single unified organization centered around our customer. This organization is a first-of-its-kind for Microsoft, bringing together expertise, knowledge, and insights across our teams. All critical customer functions are brought under the same organizational umbrella, bringing the breadth and depth of our expertise into laser focus on serving the U.S. Federal Government.
We are committed to empowering our teams, building upon our strategic investments, and delivering the technology to achieve federal missions. As our customers pursue their work, from defending the nation, to serving its people in challenging times, they look to Microsoft to help them innovate, and they expect end-to-end engagement tailored to their needs.
We aspire to...
Deliver the most innovative technology to enable mission-critical work
Support fast-paced innovation with the U.S Federal Government
Drive focused, thoughtful, end-to-end delivery tailored to unique customer needs
Continuously advance security processes within our long-standing engagement approach
Develop products with inclusivity and accessibility at the core
What Joining the Microsoft Team Means
Microsoft is on a mission to empower every person and every organization on the planet to achieve more, and security, data protection, and privacy are vital pillars in our mission. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging our diverse teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us to achieve our mission.
Microsoft continues to invest over $20B over the next 5 years in cybersecurity, including providing our customers with services and solutions that integrate across the ecosystem by connecting all your identities, endpoints, apps, emails, docs and clouds to help you close critical gaps in coverage, reduce risk, and save costs with a streamlined security portfolio.
Customer Success: Microsoft aspires to help our customers achieve their own digital transformation, leveraging the power of Microsoft Cloud solutions and support offerings. To this end, Microsoft invests in a dedicated Customer Success team that will help Microsoft customers successfully realize their business outcomes.
Security Solution Area: Microsoft aspires to help our customers achieve their secure digital transformation, leveraging the power of Microsoft Cloud security solutions and support offerings.
Security Cloud Solution Architect (CSA)
We are looking for a highly motivated and passionate Security Cloud Solution Architect (CSA) to drive customer transformation on the Microsoft Azure Platform. This is a customer-facing role, owning the overall technical relationship and strategy between the customer and Microsoft. You will own the Azure Security customer engagements, including architecture, implementation, and production.
Microsoft provides the most comprehensive, innovative, flexible, and Secure cloud platforms today. Microsoft is hiring security professionals to drive customer cloud security adoption for customers around the world.
The candidate will have experience in customer-facing roles and success in leading in-depth technical security architecture discussions with senior customer executives, Enterprise Security Architects, Enterprise Architects, IT Management, and Developers to drive the holistic Security conversation as an enabler for Cloud workloads.
Responsibilities
Microsoft Federal is looking for individuals passionate about driving security solutions and outcomes that enable mission-critical work for the U.S. Federal Government. The speed of technology is fast; the speed of security is even faster – candidates must be interested in maintaining technical expertise supported by many skilling resources provided by Microsoft to invest in your growth. Candidates for this role will meet the following.
Lead and an end-to-end value prop for Security (i.e. Zero Trust, Modern SOC with Unified Platform, Cloud Adoption, Digital Transformation and secure adoption of AI) which spans the breadth of Microsoft Security offerings.
Accelerate customer operational security outcomes throughout their Microsoft Security adoption journey by helping define a secure strategy, architecture, and implementation of necessary security controls. These controls should align with Microsoft Azure and Microsoft 365 E5 Security and Compliance services, including Identity and Access Management, Threat Protection, Cloud Security, Information Protection and Governance, Risk Management, and Compliance Management
Perform hands-on activities, supporting the customer in operationalizing native security solutions in areas such as Microsoft Defender for Cloud, Defender XDR, Sentinel, Entra, among others.
Accelerate Business Value of overall Azure adoption by improving security posture.
Apply technical knowledge to architect security solutions that meet business, IT, Regulation and Compliance needs, infusing key security technologies where appropriate.
Ensure that the solution exhibits “Secure by Design” or “Well-Architected” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon deployment.
Run Architectural Design Session to build plan for implementing solution – governing design in line with customer business goals and their technical environment. The outcome is consensus on solution design and next steps toward production.
Be a Voice of the Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the roadmap.
Troubleshoot technical issues to prove the value of implementation of Azure and M365 Security technologies.
Collaborate with other Cloud Solution Architects and MS stakeholders in developing complex end-to-end Enterprise solutions on the Microsoft Azure platform.
Orchestrate technical resources that may be required to deliver business outcomes.
Travel is an integral part of this position.
You should be willing to travel as is demanded by the needs of our customers and our business.
This position requires approximately 25% overnight travel if you reside or are willing to relocate within commuting distance to the work.
This position may require up to 75% overnight travel if you are not within commuting distance to work.
Qualifications
Required Qualifications
- Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 2+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
- OR equivalent experience.
Other Requirements
- The successful candidate must have an active U.S. Government Top Secret /SCI Security Clearance. Ability to meet Microsoft, customer and/or government security screening requirements are required pre-offer and post-hire for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.
Preferred Qualifications:
- Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 5+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
- OR Master's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 3+ years experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting
- OR equivalent experience.
- 2+ years experience working in a customer-facing role (e.g., internal and/or external).
- 2+ years experience working on technical projects.
- Technical Certification in Cloud (e.g., Azure, Amazon Web Services, Google, security certifications).
- Experience and interest across core industry security concepts and technologies, including cyber defense operations, incident response and threat hunting, digital forensics, Security Orchestration, Automation, and Response (SOAR) tools (e.g., Python, notebooks/workbooks), U.S. Federal Security Publications, Standards, and Reference Architectures, the MITRE ATT&CK framework, and common attack vectors (e.g., ransomware, identity/password attacks). Demonstrated breadth and depth of technical security expertise across Security Information and Event Management (SIEM), Endpoint/Extended Detection and Response (EDR/XDR), Cloud Access Security Brokers (CASB), Information Protection/Data Loss Prevention (DLP), AI Security (with, of, for), Advanced Identity Protection, User Entity Behavioral Analytics (UEBA), Network Infrastructure, Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Zero Trust Network Architecture, and OT/IoT Security Solutions.
- One or more of the following security domains: Security Operations Center (SOC) Modernization (i.e. SIEM, SOAR); Zero Trust (i.e. securing identity, endpoints, data, applications, network, infrastructure); Security Governance Risk and Compliance (GRC); Critical Infrastructure Protection (i.e. securing Operational Technology, Internet of Things); Security Architecture and Engineering (Application, Network, Systems)
- One or more Microsoft Security Certifications: Microsoft 365 Security Administrator (MS-500), Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100), Security Operations Analyst Associate (SC-200), Identity and Access Administrator Associate (SC-300), Information Protection Administrator Associate (SC-400).
- At least one industry certification or credentials that meet DoD 8140 (formerly DoD 8570) level 3 compliance requirements to include: CISSP, CASP, CCNP, CEH, CFR, GCED, GCFA, GCIH, GICSP, SCYBER. Or similar technical industry certification: CCIE, CPTE, GCIP, GPEN, GRID, GWAPT, OSCP.
Cloud Solution Architecture IC3 - The typical base pay range for this role across the U.S. is USD $86,100 - $169,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $113,300 - $187,400 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- Bachelor's degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or a related field, plus 2+ years of experience in cloud/infrastructure technologies, IT consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, or consulting; equivalent experience accepted.
- Active U.S. Government Top Secret/SCI security clearance.
- Ability to pass Microsoft, customer, and government security screening requirements.
- U.S. citizenship verification.
- Bachelor's degree in a relevant field plus 5+ years of applicable experience, or a relevant master's degree plus 3+ years of applicable experience; equivalent experience accepted.
- 2+ years of experience in a customer-facing role.
- 2+ years of experience working on technical projects.
- Technical cloud certification, such as Azure, AWS, Google Cloud, or a security certification.
- Experience with cyber defense operations, incident response, threat hunting, digital forensics, SOAR tools, U.S. federal security publications and standards, MITRE ATT&CK, and common attack vectors.
- Expertise in SIEM, EDR/XDR, CASB, DLP, AI security, identity protection, UEBA, network infrastructure, firewalls, IDS/IPS, Zero Trust, and OT/IoT security.
- Experience in at least one security domain: SOC modernization, Zero Trust, GRC, critical infrastructure protection, or security architecture and engineering.
- One or more Microsoft Security certifications, including MS-500, AZ-500, SC-100, SC-200, SC-300, or SC-400.
- At least one DoD 8140/8570 Level 3-compliant certification or comparable industry certification, such as CISSP, CASP, CCNP, CEH, GCFA, GCIH, GICSP, OSCP, or equivalent.
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Fair & Transparent Compensation — Pay is presented as broadly competitive overall, with clear role/level/location variation and an emphasis on using posted ranges and band information for apples-to-apples comparisons.
-
Retirement Support — Retirement benefits are described as a standout, highlighted by a strong 401(k) match structure and immediate vesting, plus additional plan features for tax-advantaged saving.
-
Parental & Family Support — Family-oriented benefits are portrayed as a meaningful strength, with substantial paid parental leave and added supports like back-up care and adoption/surrogacy assistance.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
