IT Security Architect (Microsoft), hibrido

IT Security Architect (Microsoft) Perfil buscado Own the definition and evolution of the IT Security Architecture, establishing security principles, standards and target architectures while accelerating the adoption of Zero Trust strategies across End User Computing and Digital Workplace environments. Architect and govern secure IT solutions covering endpoint protection, device management, and remote connectivity, ensuring security requirements are embedded across Microsoft 365, collaboration tools, and employee-facing technology services. Lead the design and integration of Identity Access Management (IAM) capabilities, including Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, and Single Sign-On (SSO). Drive security controls related to Data Loss Prevention (DLP) and Microsoft Information Protection to safeguard corporate information assets. Define and maintain workplace security frameworks, technical standards, and control baselines. Support security risk assessments, governance activities, architecture assurance reviews, and the management of policy exceptions when required. Serve as the primary security partner for Technology, Enterprise Architecture, Risk, and Business stakeholders, providing guidance on security design decisions and presenting architecture recommendations, risk mitigation strategies, and security roadmaps to senior management. International end client company Professional development Minimum 5 years of experience within IT Security, Endpoint Security, End User Computing (EUC) Security, or Information Security Architecture roles, with a strong track record of delivering security initiatives in enterprise environments. Demonstrated experience in designing and implementing workplace security architectures at scale, ideally within complex international organizations operating across multiple regions and business units. Hands-on expertise with security technologies such as Microsoft Defender, CrowdStrike, or SentinelOne (EDR/XDR), as well as endpoint and device management platforms including Microsoft Intune, UEM, and MDM solutions. Strong knowledge of Microsoft Entra ID, Active Directory, MFA, Conditional Access, Microsoft 365 Security, Microsoft Purview, DLP, and Defender for Office 365 is highly desirable. Solid understanding of modern security frameworks and architectures, including Zero Trust, SASE, SSE, and secure remote access models. Experience managing Vulnerability Management, Patch Management, endpoint hardening, and Application Control practices within enterprise environments. Familiarity with security governance and assurance processes, including Architecture Review Boards, Risk Management, security standards definition, and policy lifecycle management. Professional proficiency in English is essential. International end client company based in Barcelona. Hybrid working model with flexibility. Competitive compensation package and additional perks. Continuous learning and career development opportunities. Zero Trust, Microsoft 365, Microsoft Entra ID,