Lead Security Architect (MDE, Entra ID, MDCA)

Avanade
Jakarta
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 10+ yearsSkills: ["Architecture workshops facilitation","Stakeholder management","Technical stakeholder coordination","Ownership","Risk input management"]

Lead architecture for integrated Microsoft security solutions across large enterprise environments. Shape Defender and identity designs, drive discovery and architecture for Microsoft Defender XDR, Defender for Endpoint, Microsoft Entra ID, and Defender for Cloud Apps, and assess configurations, identity controls, and Conditional Access. Define EDR baselines, ASR rules, MDCA connectors/policies, and Entra design for synchronization, MFA, RBAC, and PIM, producing designs, guidance, and risk inputs through go-live and hypercare.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Avanade
Avanade
4 weeks ago

Lead Security Architect (MDE, Entra ID, MDCA)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Lead architecture for integrated Microsoft security solutions across large enterprise environments. Shape Defender and identity designs, drive discovery and architecture for Microsoft Defender XDR, Defender for Endpoint, Microsoft Entra ID, and Defender for Cloud Apps, and assess configurations, identity controls, and Conditional Access. Define EDR baselines, ASR rules, MDCA connectors/policies, and Entra design for synchronization, MFA, RBAC, and PIM, producing designs, guidance, and risk inputs through go-live and hypercare.
Location: Jakarta
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Director level

Key Responsibilities

  • •Lead discovery and architecture activities across Microsoft Defender XDR, Defender for Endpoint, Microsoft Entra ID, and Defender for Cloud Apps.
  • •Assess endpoint security configurations, identity controls, user synchronization, MFA, Conditional Access, application connectors, policy requirements, and integration dependencies.
  • •Define Defender for Endpoint architecture including EDR baselines, antivirus policies, ASR rules, onboarding requirements, coexistence considerations, and Intune policy deployment.
  • •Design Defender for Cloud Apps connectors and policies for Microsoft 365 apps, including cloud discovery, threat detection, file/session controls, and Conditional Access App Control.
  • •Produce technical designs and architecture decisions (assumptions, dependencies, risk inputs), lead design reviews/walkthroughs/knowledge transfer, and provide go-live/hypercare architecture guidance for approved designs.

Key Requirements

  • •Minimum 10+ years of experience in cybersecurity architecture, Microsoft security consulting, enterprise security delivery, or related roles.
  • •Strong architecture experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps.
  • •Strong knowledge of Microsoft Entra ID and Active Directory integration, including identity synchronization, MFA, Conditional Access, RBAC, and Privileged Identity Management.
  • •Able to lead architecture workshops and clearly explain security decisions, risks, prerequisites, and implementation guidance to technical and senior stakeholders.
  • •Experience designing EDR baselines, antivirus policies, ASR rules, endpoint onboarding, security-policy deployment, and legacy security-tool coexistence approaches.
Experience:10+ yearsCybersecurityMicrosoft securityEnterprise securitySecurity consulting
Skills:Architecture workshops facilitationStakeholder managementTechnical stakeholder coordinationOwnershipRisk input management
Certifications:SC-200MD-102SC-900AZ-500SC-300SC-401
Tech Stack:Microsoft Defender XDRMicrosoft Defender for EndpointMicrosoft Entra IDMicrosoft Defender for Cloud AppsIntuneMicrosoft 365Active DirectoryEDREDR baselinesAttack Surface Reduction (ASR)MFAConditional AccessRBACPrivileged Identity Management (PIM)MDCA connectorsCloud discoveryThreat detectionConditional Access App ControlAntivirus policiesUser synchronization

Company Brief

Avanade
Global digital innovation and IT services company delivering Microsoft-based cloud, digital and application services. Partners with enterprises to design, build and run business solutions across cloud, data, AI, modern workplace and industry-specific transformations.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Established Company
Headquarters: Seattle, United States
Founded: 2000
Glassdoor
Glassdoor: 3.9
WebsiteLinkedIn