全职 Cybersecurity Architect – Azure - Microsoft Security 工作, 薪水, Kerry Consulting 公司招聘中 - Ricebowl

We are partnering with an established financial services organisation to appoint a Cybersecurity Architect with strong hands-on expertise in Microsoft Azure and the Microsoft security ecosystem.

This role will be responsible for designing, implementing and enhancing enterprise security architecture across cloud and on-premises environments, with a particular focus on Azure cloud security, identity protection, endpoint security and threat detection.

The ideal candidate is a technically strong, hands-on security architect who can translate security requirements into practical engineering solutions and drive initiatives from design through implementation and operationalisation.

Key Responsibilities:

• Design, implement and maintain enterprise security architecture across Microsoft Azure, Microsoft 365 and hybrid infrastructure environments.
• Lead Azure security architecture and engineering, including secure landing zones, network security, identity and access management, privileged access, secrets management and cloud security posture.
• Architect, deploy and optimise security solutions across the Microsoft security stack, including Microsoft Defender for Endpoint, Defender for Cloud, Microsoft Entra ID and other Microsoft E5 security capabilities.
• Drive security technology implementation and enhancement initiatives across endpoint protection, vulnerability management, network security, SIEM/SOC integration and data loss prevention.
• Partner with infrastructure, cloud and application teams to embed security-by-design principles into technology projects and infrastructure changes.
• Provide technical leadership throughout the project lifecycle, from solution design and architecture reviews through implementation, testing and operational handover.
• Conduct security architecture reviews, technical risk assessments and threat modelling to identify vulnerabilities and recommend appropriate controls.
• Support complex security incidents, working with internal stakeholders and external security service providers on technical investigations and remediation.
• Ensure security architecture and controls align with relevant regulatory requirements, industry standards and cybersecurity best practices.

Requirements:

• Approximately 8–12 years of experience in cybersecurity engineering, security architecture or infrastructure security.
• Strong hands-on experience with Microsoft Azure security architecture and engineering is essential. Candidates should have practical experience designing, configuring and implementing Azure security controls, rather than purely providing governance or architectural oversight.
• Deep technical expertise across the Microsoft security ecosystem, particularly Microsoft Defender for Endpoint, Defender for Cloud, Entra ID, identity protection and Microsoft 365 security capabilities.
• Strong understanding of Azure networking, secure cloud landing zones, Zero Trust architecture, privileged access management and secrets management.
• Experience with enterprise security technologies including EDR/XDR, SIEM, vulnerability management, network segmentation and data protection.
• Proven ability to lead security architecture initiatives through hands-on implementation, integration and operational delivery.
• Experience securing hybrid cloud environments and working closely with infrastructure and engineering teams.
• Strong problem-solving skills, technical judgement and ability to design pragmatic, scalable security solutions.
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and business teams.
• Experience within financial services or other highly regulated environments would be advantageous.
• Relevant certifications such as Microsoft Azure Security Engineer Associate (AZ-500), CISSP or CCSP would be beneficial.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at ************* for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060