Security Architect – Microsoft Cloud

About the role

Avanade is seeking a Security Architect (Manager level) to lead security architecture across complex Microsoft platform programmes in Auckland. You will define and govern security design for Dynamics 365, Azure, Power Platform and M365 environments, ensuring solutions are secure, compliant and resilient.

Key responsibilities

• Lead security architecture design for enterprise Microsoft technology programmes, including Dynamics 365, Azure and Power Platform.
• Define security requirements, threat models and risk assessments for complex solution environments.
• Design end‑to‑end security architectures covering identity and access management, network security, data protection and compliance controls.
• Advise clients on security standards, frameworks and regulatory compliance relevant to New Zealand and the broader region.
• Review and govern technical designs and implementation deliverables for security risk and compliance.
• Collaborate with infrastructure, application and cloud architecture teams to embed security into solution design.
• Lead client workshops and present findings to senior stakeholders and executives.
• Support pre‑sales engagements with security design input, effort estimates and risk assessments.
• Mentor junior consultants on security practices and standards.

Required profile

• 8 + years of professional experience in information security with significant architecture experience.
• Strong communication skills and ability to translate complex security concepts for non‑technical audiences.
• Experience working in consulting or professional services environments.
• Comfortable engaging with client executives and advising on security strategy and risk.

Required skills

• Deep expertise in Microsoft Azure security services: Microsoft Defender, Sentinel, Azure AD/Entra ID, Conditional Access, PIM.
• Experience securing Dynamics 365 CE/ERP and Power Platform, including DLP policies and role‑based access.
• Knowledge of M365 security and compliance tools: Purview, Intune, Defender for Office 365.
• Understanding of Zero Trust architecture principles.
• Familiarity with NZISM, ISM and Essential Eight frameworks.
• Experience with cloud network security: Virtual Networks, NSGs, Private Endpoints, Azure Firewall.