Microsoft continues to invest over $20B over the next 5 years in cybersecurity, including providing our customers with services and solutions that integrate across the ecosystem by connecting all your identities, endpoints, apps, emails, docs and clouds to help you close critical gaps in coverage, reduce risk, and save costs with a streamlined security portfolio.
Customer Success: Microsoft aspires to help our customers achieve their own digital transformation, leveraging the power of Microsoft Cloud solutions and support offerings. To this end, Microsoft invests in a dedicated Customer Success team that will help Microsoft customers successfully realize their business outcomes.
Security Solution Area: Microsoft aspires to help our customers achieve their secure digital transformation, leveraging the power of Microsoft Cloud security solutions and support offerings.
Cybersecurity Cloud Solution Architect (CSA) We are looking for a Senior Cybersecurity Cloud Solution Architect (CSA) with expertise in identity security to drive customer transformation on the Microsoft Azure Platform. This is a customer-facing role, owning the overall technical relationship and strategy between the customer and Microsoft. You will own the Azure Security customer engagements, including architecture, implementation, and production.
Microsoft provides the most comprehensive, innovative, flexible, and Secure cloud platforms today. Microsoft is hiring security professionals to drive customer cloud security adoption for customers around the world.
Candidates should have experience in customer-facing roles and success in leading in-depth technical security architecture discussions with senior customer executives, Enterprise Security Architects, Enterprise Architects, IT leaders, and developers to drive the holistic Security conversation as an enabler for Cloud workloads.
Responsibilities
Microsoft Federal is looking for individuals with the skills to deliver security solutions and outcomes that enable mission-critical work for the U.S. Federal Government. The speed of technology is fast; the speed of security is even faster – This role involves maintaining technical expertise, with learning resources provided by Microsoft to support continued growth. Responsibilities include the following.
Lead and an end-to-end value prop for Security (i.e. Zero Trust, Modern SOC with Unified Platform, Cloud Adoption, Digital Transformation and secure adoption of AI) which spans the breadth of Microsoft Security offerings.
Accelerate customer operational security outcomes throughout their Microsoft Security adoption journey by helping define a secure strategy, architecture, and implementation of necessary security controls. These controls should align with Microsoft Azure and Microsoft 365 E7 Security and Compliance services, including Identity and Access Management, Threat Protection, Cloud Security, Information Protection and Governance, Risk Management, and Compliance Management
Perform hands-on activities, supporting the customer in operationalizing native security solutions in areas such as Microsoft Defender for Cloud, Defender XDR, Sentinel, Entra, among others.
Accelerate Business Value of overall Azure adoption by improving security posture.
Apply technical knowledge to architect security solutions that meet business, IT, Regulation and Compliance needs, infusing key security technologies where appropriate.
Ensure that the solution exhibits “Secure by Design” or “Well-Architected” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon deployment.
Run Architectural Design Session to build plan for implementing solution – governing design in line with customer business goals and their technical environment. The outcome is consensus on solution design and next steps toward production.
Be a Voice of the Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the roadmap.
Troubleshoot technical issues to prove the value of implementation of Azure and M365 Security technologies.
Collaborate with other Cloud Solution Architects and MS stakeholders in developing complex end-to-end Enterprise solutions on the Microsoft Azure platform.
Orchestrate technical resources that may be required to deliver business outcomes.
Travel is an integral part of this position. You should be willing to travel as is demanded by the needs of our customers and our business. This position requires approximately 50% overnight travel if you reside or are willing to relocate within commuting distance to the work. This position may require up to 75% overnight travel if you are not within commuting distance to work.
Qualifications
Required Qualifications
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR equivalent experience.
Other Requirements
Security Clearance Requirements: Candidates must meet the Microsoft, customer, and/or government security screening requirements for this role. These requirements include, but are not limited to, the following specialized security screenings:
The successful candidate must have an active U.S. Government Top Secret Clearance. Candidates must meet Microsoft, customer, and/or government security screening requirements for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.
Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance
Preferred Qualifications
The following qualifications are preferred, not required. Candidates do not need to meet every preferred qualification to apply. Relevant skills and equivalent experience are welcome.
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 8+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR Master's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 6+ years experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting OR equivalent experience.
4+ years experience working in a customer-facing role (e.g., internal and/or external).
4+ years experience working on technical projects.
Experience across modern identity and Zero Trust principles, including authentication and authorization models, identity protocols (SAML, OAuth2, OpenID Connect, Kerberos), identity lifecycle management, and audit/compliance practices. Demonstrated depth in Microsoft Zero Trust architecture and identity-centric security strategies spanning users, devices, applications, and monitoring/visibility.
Experience with identity and access management solutions including directory synchronization, privileged identity management, role-based access control (RBAC), workload identities, multifactor authentication (MFA), and adaptive/risk-based access policies. Proven ability to design and implement identity protection and threat mitigation strategies aligned to enterprise security operations.
Experience with identity governance and administration (IGA), including privileged access management (PAM), application access governance, just-in-time (JIT) access, provisioning and lifecycle automation, reporting, and monitoring capabilities across hybrid and cloud environments.
Knowledge of authentication security technologies and standards including PKI, certificates, FIDO2/passkeys, and modern passwordless authentication approaches. Familiarity with multi-cloud identity architectures and federation patterns across SaaS, PaaS, and hybrid environments.
Experience designing and implementing Microsoft Entra Global Secure Access (GSA), including Microsoft Entra Internet Access and Microsoft Entra Private Access, to enable identity-centric secure access to internet, SaaS, and private applications. Familiarity with integrating Conditional Access and Zero Trust principles into Secure Service Edge (SSE) architectures across hybrid and cloud environments.
Experience integrating identity solutions with security operations, including alignment with SOC processes, monitoring, detection, and response workflows, and identity signals within broader security platforms (e.g., XDR/SIEM).
Experience applying identity principles to diverse technology scenarios, including cloud services, SaaS application integration, and enterprise authorization models, with the ability to translate abstract identity concepts into practical architectures and solutions.
Technical Certification in Cloud (e.g., Azure, Amazon Web Services, Google, security certifications).
Relevant industry certifications or credentials in identity, security, or cloud architecture (e.g., CISSP, CISM, CCSP, or equivalent).
Experience leading or supporting complex identity modernization initiatives, including design, architecture, implementation, and/or support of large-scale enterprise identity solutions across hybrid and cloud environments.
Experience delivering consultative technical engagements focused on identity, Zero Trust transformation, and secure access across distributed systems and applications.
Cloud Solution Architecture IC4 - The typical base pay range for this role across the U.S. is USD $106,400 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $137,600 - $222,600 per year.
- Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
- https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
