Excellent Opportunity with MNC USI - Immediate Joiner

The role focuses on Zero Trust security, identity-driven access, data protection, and threat prevention, integrating Entra ID, Intune, Defender, and M365 security services to protect users and sensitive data across modern, hybrid, and virtual work environments.

Key Responsibilities :

Microsoft 365 Security Architecture :

- Act as Security Architect / SME for Microsoft 365, covering Exchange Online, SharePoint Online, OneDrive, Teams, and Office apps.

- Design and enforce end to end O365 security architecture aligned with Zero Trust and least?privilege principles.

- Establish security standards, patterns, and governance across the M365 platform.

Identity & Access Security (Entra ID) :

- Design and implement Conditional Access policies for secure access to O365 workloads.

- Enable phishing?resistant MFA and Continuous Access Evaluation (CAE) for internal and external users.

- Design Entra ID controls to restrict privileged access and sensitive data to managed and compliant devices.

- Govern Entra Application Registrations, permissions, and access lifecycle.

Threat Protection & Monitoring :

- Implement and optimize :

1. Microsoft Defender for Office 365

2. Defender for Identity (as applicable)

3. Defender for Cloud Apps (CASB)

- Protect against phishing, malware, ransomware, and identity-based attacks.

- Identify and close security gaps across email, collaboration, and cloud app usage.

Data Protection & Information Security :

- Design and implement Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, and Teams.

- Apply Information Protection (sensitivity labels, encryption, retention).

- Ensure secure sharing and collaboration for internal and external users.

Endpoint, App & Browser Security Integration :

- Integrate Intune app protection and device compliance with O365 access.

- Roll out secure browser and app protection for Office 365 users.

- Ensure access to O365 data is based on user, device, app, and risk posture.

Virtual & Cloud Workspace Security :

- Close security control gaps for :

1. App Virtualization

2. Virtual Desktop / AVD / VDI environments

- Evaluate Windows 365 (W365) fitment and apply O365 security controls accordingly.

Governance & Best Practices :

- Drive adoption of overall Entra ID and O365 security best practices.

- Conduct security posture reviews and continuous improvement initiatives.

- Work closely with identity, endpoint, SOC, and compliance teams.

Required Skills & Expertise :

Core Technical Skills :

- Proven experience as an O365 / M365 Security Architect or Senior Security SME.

- Strong hands?on expertise with :

1. Microsoft Defender for Office 365

2. Entra ID (Azure AD) security & Conditional Access

3. Defender for Cloud Apps

4. Intune + M365 security integrations

- Deep understanding of cloud security principles, Zero Trust, and least-privilege access.

Security & Architecture :

- Experience designing security for enterprise-scale M365 tenants.

- Strong knowledge of identity-based threats, email security, and cloud app governance.

- Ability to translate business risks into practical security controls.

Soft Skills :

- Highly motivated, proactive, and ownership-driven.

- Strong communication and stakeholder management skills.

- Ability to act as a trusted advisor on M365 security strategy.

Nice to Have :

- Experience with compliance frameworks (ISO, SOC2, GDPR, etc.).

- Exposure to SOC operations and security incident response.

- Microsoft certifications such as SC-100, SC-200, SC-300, MS-500.