Cloud Solution Architect - Security

With over 17,000 employees worldwide, the mission of the Customer Experience & Success (CE&S) organization is to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft’s products and services, ignited by our people and culture. Come join CE&S and help us build a future where customers achieve their business outcomes faster with technology that does more.

The Global Customer Success (GCS) organization, an organization within CE&S, is leading the effort to enable customer success on the Microsoft Cloud by harnessing leading, AI-powered capabilities and human expertise to deliver innovation solutions that accelerate business value, drive operational excellence and nurture long term loyalty.

In the Customer Success team, we are looking for people with a passion for delivering customer success. As a Cloud Solution Architect (CSA) reporting to the Cloud Solution Architect Manager you will enable mainly SMC &Digital (Small, Medium, Corporate and Digital) customers to achieve their outcomes, based on their investments in Microsoft technology. Leveraging your leading technical team’s expertise, you will drive the team to ensure customers get value from Microsoft.

In this role you will adapt business models, plans, and solutions to insights. Act as the voice of the customer (VOC)/partner across communities to add and prioritize. Leverages and champions an existing architecture approach to achieve agreed commitments to the customer/partner. Demonstrate and prove solutions capability and value. Apply broad technical knowledge across various of architecture solutions to meet requirements and resolve identified constraints. Lead customer/partner projects that implement technical architecture. Identify, escalate, and work to resolve technical blockers and route non-technical issues for removal. Adapt methodology and apply governance to minimize business and technical risks. Generate new ideas for changes and improvements. Develop and expand existing impactful relationships with stakeholders. Respectfully challenge customers/partners when going in the wrong direction and escalate appropriately. Identify Microsoft''s strengths over competitive solutions to convince customers of solution. Share ideas, insight, and strategic, technical input with internal teams using a thorough knowledge of specific Microsoft products and their context in the competitive landscape. Participate in external architect community events and share learnings with the internal team. Lead architecture design, resiliency reviews, and technical optimization that result in production deployment application and increase customer usage/Azure Consumed Revenue. The CSA drives delivery execution through preparedness, precision delivery, overall utilization, and high customer satisfaction in a cost-efficient manner.

This role is flexible in that you can work up to 100% from home.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

We are looking for a highly motivated and passionate Cloud Solution Architect (CSA) to drive customer transformation in our Solutions. You will own the customer engagements, including architecture, implementation, and production.

This role requires deep technical knowledge in the Security Solution area as the core technical focus. Additionally, the ability to cover other solution areas is essential. Ideally, you should be able to cover a second solution area by default (e.g., Azure Infrastructure and Security). A strong passion and growth mindset are also crucial for expanding into a broader range of technical areas.

Mindset matters - This role requires a strong mindset to operate effectively under high-pressure situations, along with the ability to stay updated with new technologies in a short time frame. Additionally, it involves managing uncertainty, team building, and other responsibilities beyond technical delivery, as our team work as a team. A mindset that embraces new challenges is crucial for success in this role.

The ideal candidate must have experience in customer-facing roles and success in leading in-depth technical architecture discussions with senior customer executives, Architects, IT Management, and Developers to drive value to our customers and is open to travel to customer site as needed by business.

Key responsibilities include:
• Team Building and Leadership Experience - Demonstrate a positive mindset and leadership skills for your colleagues both Japan, Greater China regions and across the world and lead the team as a senior engineer. A passion for building the team together with your manager is essential.

Customer Centricity
• Customer Satisfaction - Drive positive Customer Satisfaction & become a trusted advisor. Become trusted advisors to customers by leveraging solution area expertise to enable defined Customer Success Plan outcomes.
• Customer/Partner Insights - Provide feedback & insights from customers/partners.
• Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Land an end-to-end value prop for Security (i.e., Zero Trust) which spans the breadth of Microsoft Security offerings, and with focus on Threat Protection, ID + Access Management and Cloud Security.
• Understanding Customer/Partner Technical Environment (Insights about Customer/Partner and Industry): Gather customer/partner insights (e.g., feedback around technical preferences, environments, business needs, competitive landscape), and map architecture and digital transformation solutions to customer/partner business outcomes. Adapt business models, plans, and solutions to insights.

Business Impact
• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments.
• Identify resolutions to Customer blockers by leveraging Solution Area subject matter expertise. Deliver according to MS best practices & using repeatable IP.
• Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon deployment.

Technical Leadership
• Learn It All – Align individual skilling to team/area demands & Customer Success goals.
• Accelerate customer outcomes - Share expertise, contribute to IP creation & re-use to accelerate customer outcomes.
• Run Architectural Design Session to build a plan for implementing the solution – governing design in line with customer business goals and their technical environment. Outcome is consensus on solution design and next steps toward production.
• Collaborate and orchestrate with other Cloud Solution Architects and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Architecture Design and Deployment (Architecture Proposals): Receive and synthesize data about customer/partner business and technical requirements, address them with technical architecture(s), demonstrate and prove those solutions capability and business value through design collaboration sessions with the customer/partner.
• Architecture Design and Deployment (Requirements and Constraints): Apply broad technical knowledge across various of architecture solutions to meet business and information technology (IT) requirements and resolve identified technical constraints. Help to shape and enhance customers'' requirements.
• Architecture Design and Deployment (Resolving Blockers): Identify, escalate, and work to resolve technical blockers (e.g., changing configurations, sample coding) to accelerate architecture implementations and routes non-technical issues for removal by the appropriate party.
• Trusted Advisor (Challenger Mindset): Respectfully challenge customers/partners when going in the wrong direction and escalate appropriately.
• Trusted Advisor (Competitor Insights/ Differentiated Value Proposition): Understand the competitor''s architecture solutions and identify Microsoft''s strengths over competitive solutions to drive conversations with customers/partners and convince them of solution.
• Customer Usage: Lead architecture design, resiliency reviews, and technical optimization that result in production deployment application and increase customer business value. Drive efforts to ensure that the customer''s environment and applications are well-architected.

Qualifications

Language:
•Fluent in reading, writing and speaking Japanese. Mandarin, Cantonese and English are better to have.

• Leader role experience or any related to role experience is must to have. This role requires discussing cybersecurity related to discussion with customer executive level and comprehensive view will be needed, seniority and strong communication skills are must to have.
• Proven experience in technology solutions, practice development, architecture, consulting, and/or cloud/infrastructure technologies.
• 15+ years of relevant industry experience in technical roles
• Strong interpersonal, presentation, and communications skills and the ability to work with customers at the C level
• Experience with managing critical and complex customer situations or incidents
• Bachelor''s Degree in Computer Science, Information Technology, or related field (or equivalent experience)
•Leader role experience or any seniority required role experience is must to have.
•presentation skills

• The ability to teach, tailor, and take control of the technical sales process to drive specific customer actions and disrupt conventional thinking.
• Knowledge of the cloud platform, productivity platform, identity, and multi-geography deployment strategy.
• The ability to explain and advise on cloud security considerations, capabilities, and tools across software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS).
• The ability to apply ingenuity, inventiveness, and imagination to the inclusive design and construction of a product, service, program, or initiative.
• The ability to make decisions in a fast-paced, rapidly changing environment. This includes the ability to define, diagnose, and determine an appropriate resolution, recommendation, or decision while considering alternatives and factors (e.g., resources, costs, tradeoffs).
• The ability to adapt one''s behavior to different people and situations, while recognizing, acknowledging, and understanding different perspectives.
• The ability to lead customer conversations on competitive cloud differentiation in compelling customer terms. This includes the ability to lead the analysis, planning, and execution of cloud migration to drive successful transitions to the cloud.
• The ability to build and maintain a professional network internally and with individuals outside the organization to share information, promote collaboration, and optimize individual and organizational effectiveness.
• The ability to make a verbal message understood and to receive/understand messages during in-person or remote (e.g., telephone) interactions.
• The ability to identify problems and review related information to develop and evaluate options and implement solutions.
• Knowledge of and the ability to carry out the process of planning, organizing, and managing tasks and resources to accomplish a well-defined objective. This includes the ability to manage and provide project deliverables, optimize the contribution of the people involved, and assess the impact of project decisions on quality, productivity, schedules, cost, performance, etc.
• The ability to develop and maintain positive working relationships with supervisors, staff, managers, customers, and vendors. This includes expressing empathy and compassion when dealing with the needs and problems of others, being approachable, taking time to address the concerns of coworkers, and treating others with respect and dignity.
• The ability to manage project stakeholders and stakeholder engagements. This includes identifying stakeholders, prioritizing their concerns, managing expectations, and planning and monitoring stakeholder engagements.
• The ability to prepare clear, accurate, and understandable written text, and follow the basic rules of spelling, grammar, and punctuation. This may include the ability to create and receive/understand memos, emails, proposals, reports, and professional or general correspondence. This may also include the ability to comprehend, communicate, and deliver technical information to the audience in a manner that is adapted to their needs, levels of understanding, and backgrounds.

Technical Expertise:
*This role requires covering multiple solution areas with deep technical knowledge and experience by default. Core technical area is Security Solution area and to have knowledge of Other solution areas. Additionally, a strong passion and growth mindset are essential to expand into a wider range of technical areas.

At least 15 years of experience working directly with customers in any of the following: providing technical readiness and training, delivery of support services, on-premises and remote technical support, solution development, account management, technical requirements gathering.
Extensive working experience with Security in the context of Cloud Computing: Infrastructure as a Service (IaaS), Platform as a Services (PaaS), and Software as a service and understanding of one or more cloud security standards and frameworks such as CIS, NIST, CSA, etc.
At least 15 years of security related experience with any of the following security domain technologies:
Azure and Cloud Security Engineering
• Azure Security, Infrastructure, Databases, Networking, Virtual Machines
• Cyber Security related to experience
• Azure Secrets and Keys
• Azure Identity
• Intune
• Troubleshooting of data, logging and audit, security monitoring
• Azure Governance and, Compliance
• Microsoft Defender for Identity
• Azure Sentinel
• Microsoft Client/Server Operating Systems Security, including related services (eg Certificate Authority, authentication/authorization mechanisms, encryption, health attestation)
• Microsoft Security recommendation experience (eg Securing Privileged Access, Credential Theft Mitigations)
• Azure Security Services (eg Azure Advanced Threat Protection, Azure Information Protection, Azure Security Center, Azure Log Analytics)
• Security Threat Landscape experience including advanced attack vectors and tools (eg Pass the Hash, Golden Ticket, ransomware)
Infrastructure Security experience with competitive cloud security technologies, cloud security platforms, or any of the following:
• Cloud workload protection
• Threat protection
• WAF (Web Application Firewall)
• Stateful firewall. (NG Firewall)
• Data encryption and protection key services.
• SIEM, and Cloud Security Analytics
• Security Orchestration, Automation, and Response (SOAR)
• Security Operation Center
• Identity and Access Management

Microsoft 365 Security
• Microsoft Defender for Office 365
• Microsoft Defender for Endpoint
• Compliance
• Records Management
• eDiscovery/Advanced eDiscovery
• Data Loss Prevention
• Information Governance
• Information Protection
• Insider Risk Management
• Security
• Advanced Hunting
• Simulation Training
• Threat Analytics
• Investigations

Modern Management - Mobility and Security Solutions in any of the following:
Microsoft Intune; Autopilot, Desktop Analytics, Conditional Access, identity governance, Azure Active Directory (AAD), Microsoft Cloud App Security (MCAS); Advanced Threat Analytics; Defender for O365, Microsoft Endpoint Configuration Manager.
Endpoint Management Security related technologies:
• Microsoft Enterprise Mobility Suite + Security (EMS),
• Active Directory/Identity
• Windows Defender Advanced Threat Protection (D-ATP)
• Office 365 Advanced Threat Protection
• Other endpoint security solutions and comprehensive threat protection technologies.

Other Qualifications:
• Ability to work independently and collaboratively working in a fast-paced environment where technology and customers'' requirements can change regularly
• Demonstrated aptitude for providing extraordinary customer service, influence, and impact while problem solving and building Customer & Partner relationships.
• Possess a passion for continuous learning, strong problem-solving skills, critical thinking and good judgement
• Ability to apply product & technology knowledge to improve Microsoft products and the customer experience
• Solid understanding of client/server, networking, and Internet technologies fundamentals.
• Technical Delivery and Customer facing presentation skills with a high degree of comfort with both large and small audiences
• Must have the ability to take on internal initiatives to create services opportunities, and work in a fast-paced environment while balancing multiple demands, addressing shifting priorities, and maintaining focus

Experience Profile:
• 8+ years of IT experience, with minimum 3 years of experience in Infrastructure/Cloud Security related profile, experience in designing, delivering or managing information security services
Any of the below certifications
• Certification (Any one of the certifications – Minimum)
• CISA, CISM, ITIL, CISSP, CISM, CCSK, CCSP, CCAK, CIRSC
• Cloud Security Certification
• Security Certification – CEH or above
• Certification in Microsoft 365 Security Administration or Azure Security

Knowledge, Skills and Abilities
• The ability to teach, tailor, and take control of the technical sales process to drive specific customer actions and disrupt conventional thinking.
• Knowledge of the cloud platform, productivity platform, identity, and multi-geography deployment strategy.
• The ability to explain and advise on cloud security considerations, capabilities, and tools across software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS).
• The ability to apply ingenuity, inventiveness, and imagination to the inclusive design and construction of a product, service, program, or initiative.
• The ability to lead customer conversations on competitive cloud differentiation in compelling customer terms. This includes the ability to lead the analysis, planning, and execution of cloud migration to drive successful transitions to the cloud.
• The ability to make a verbal message understood and to receive/understand messages during in-person or remote (e.g., telephone) interactions.
• The ability to identify problems and review related information to develop and evaluate options and implement solutions.
Competencies
• Technical leadership with technical Depth & Breadth
• Advisory skills
• Client relationship management
• Cross-group collaboration
• Strong communication & presentation skills
• Value selling skills
• Basic business acumen

Other technical areas we look for real world demonstrated ability are:
■Azure Infra Solution Area■
• SAP on Azure experience. SAP deep knowledge is ideal to have.
• Azure Governance / Cloud Adoption Framework, Azure Policy, Management Groups, Governance / Compliance as Code
• ARM JSON or Terraform Templates – (Infrastructure as code) Azure CLI and/or PowerShell
• Strong understanding of Windows and/or Linux Operating Systems
• Security concepts for Cloud Infrastructure and Microsoft Operating Systems
• Azure Active Directory (AAD) and Azure AD Connect knowledge and experience.
• Strong troubleshooting skills and support experience
• Face-to-face customer engagement skills
• Technical Delivery and Customer facing presentation skills with a high degree of comfort with both large and small audiences.
• Must have the ability to take on internal initiatives to create services opportunities, and work in a fast-paced environment while balancing multiple demands, addressing shifting priorities, and maintaining focus.
• Troubleshooting knowledge & skills, Microsoft Certifications qualifications desirable
• Degree qualification or equivalent experience
• Azure Security Center
• Azure Sentinel
• Microsoft Enterprise Scale Landing Zones (Enterprise Scaffold)
• Knowledge of Azure Monitor, Log Analytics
• Configuration as code, such as Desired State Configuration (DSC)
• Automation / Orchestration knowledge – Azure Automation, Runbooks
• Microsoft Azure Stack Hub / Hybrid Cloud – Connected and/or Disconnected Scenario
• Azure PaaS, Containers, App Services, REST APIs, Amazon Web Services (AWS), Google Cloud Platform (GCP)
Additional qualification required:

■Morden Work Solution Area■
Technical expertise in Modern work Product lines such as, Security & Compliance, Information Protection, Purview, InTune, Microsoft Endpoint Manager, Microsoft 365 E3/E5 features, M365 Copilot might be plus for this role.

■Application & Innovation Solution Area■
• Solid Solution Design and Development skills
• Experience with .NET technologies up to the latest version (e.g., WCF, WF, MVC).
• Advanced written, spoken English level with direct customer facing experience.
• Azure Kubernetes Service (AKS)
• Azure Containers & Orchestrators
• App Insights
• APIM
• Cosmos DB & Azure SQL basics
• Azure Key Vault
• Azure CDN
• Building Cloud-native Applications using Microservices ArchitectureAzure Service Bus
• Azure Functions
• Azure Event Hubs
• Azure Notification Hubs
• GitHub
•IIS
•.Net Development
•vAzure DevOps (ADO) & Secure DevOps: Application Security Principles and Practices
•Azure Event Grid
•IOT Hub/Protocol Gateway
•Azure Logic Apps
•Azure NetApp files
•Threat Modeling & Azure Application Security
•Azure Infrastructure Fundamentals (Compute, Storage, Migration, Security)
•Azure Front Door
•Azure Traffic Manager
•Azure Networking
•Azure Active Directory (AAD) and Azure AD Connect knowledge and experience.
•JAVA

■Data &AI Solution Area■
•Expert knowledge and experience in the architecture of enterprise data platform architecture and data lake.
•NoSQL platforms (MongoDB, Azure Cosmos DB, etc.) and NoSQL data modeling.
•RDBMS (Azure SQL, PostgreSQL, MySQL/MariaDB, Oracle DB) and RDBMS data modeling.
•Data analytics platform and data warehouse (Azure Synapse, Snowflake, BigQuery, etc.) and analytical data modeling.
•Spark/Databricks, Hadoop, massively parallel processing
•Data science platform (Azure Machine Learning, Databricks, TensorFlow, SAS, etc.)
•Knowledge in programming languages (Python, SQL, Java, etc.) .

■Biz Apps Solution Area■
•Dynamics 365 For customer engagement
•Dynamics 365 Finance and operations  
•Knowledge about relationships between Dynamics 365 CE and Azure components.
•Integrations patterns and anti-patterns with Dynamics 365.

Application Lifecycle Management | Be familiar with Azure DevOps features like:
•Azure Boards / Repository / Build and Release Pipelines.
•Microsoft Lifecycle Services : Environment Management / Environment Troubleshooting.
•Regression Suite Automation Tool | Be familiar in setup and execute.
•Dynamics 365 Customer engagement.
•Knowledge about integration between Dynamics 365 Customer Engagement Platform (D365 For Sales / Power Platform) and Finance and Supply Chain Platform.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.