Security Architect - Microsoft Security Platform
Colt Group is hiring a Security Architect in London to act as design authority for its Microsoft security stack (M365 E5: Defender, Entra ID, Purview, Sentinel), designing Zero Trust-aligned identity, endpoint and data-protection architectures and governing secure adoption of AI/Copilot capabilities.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in information security within large-scale enterprise or telecommunications environments
- Deep expertise in Microsoft 365 E5 security capabilities (Defender for Endpoint/Identity/Office 365/Cloud Apps, Entra ID P2, Sentinel, Purview)
- Strong experience designing and implementing Microsoft Purview capabilities, including DLP, Information Protection, Insider Risk and eDiscovery
- Strong understanding of Zero Trust architecture principles, particularly identity-driven security models
- Experience deploying and operating Defender and SIEM capabilities integrated within a wider security ecosystem
- Experience conducting security design reviews and translating policy into practical controls
- Experience performing risk assessments aligned to recognised methodologies
- Strong understanding of cloud security concepts across IaaS, PaaS and SaaS, particularly Azure
- Ability to translate complex technical security concepts into clear business-aligned outcomes
- Good understanding of networking and enterprise platforms (Windows/Active Directory, Linux/Unix)
- Engineering/Computer Science degree or equivalent practical experience
- Strong team player with ability to lead initiatives across multiple stakeholders
- Excellent communication and stakeholder management skills
- Understanding of AI/LLM security risks (prompt injection, data leakage, over-permissioning, e.g. Microsoft Copilot)
- Fluent in English (technical and non-technical communication)
Nice to have
- Experience designing security and governance controls for AI/LLM platforms, including Copilot integrated with Purview
- Experience consolidating endpoint and SaaS security capabilities into the Microsoft Defender ecosystem
- Experience with Security Copilot and security automation
- Understanding of Telecoms Security Act (TSA) requirements and implementation approaches
- Experience working in regulated environments (telecommunications, financial services, critical infrastructure)
Full description
Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.
Why we need this role
We are looking for a Security Architect specialising in the Microsoft Security platform (M365 E5) to join the Security and Resilience – Security Architecture team.
This role acts as the design authority and subject matter expert for Microsoft security technologies, including Defender, Entra ID and Purview, and will play a key role in modernising Colt’s security posture.
The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (DIO, Network Engineering, Service Delivery), to design and implement integrated, Zero Trust-aligned security architectures across the Colt estate.
The role combines:
- Deep technical ownership of the Microsoft Security stack (E5)
- Security design, architecture and assurance
- Strategic transformation across Colt technology domains
You will play a critical role in driving:
- Identity-driven and endpoint-focused security architecture for user-facing environments
- Data protection and compliance capabilities through Microsoft Purview
- Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling
- The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls
What you will do
- Act as the design authority for Microsoft Security architecture, covering Defender, Entra ID and Purview capabilities
- Define and maintain the target architecture for the Microsoft security platform, aligned to Colt’s Zero Trust strategy
- Lead the design and implementation of Microsoft Defender capabilities across endpoints, identities and user-facing services, ensuring integration with wider security tooling where required
- Define appropriate integration patterns between Microsoft Defender and non-Microsoft security tooling, particularly across server and infrastructure environments
- Design and deliver Microsoft Purview solutions, including Data Loss Prevention (DLP), Information Protection, Insider Risk and data governance
- Define and implement identity-first security controls using Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM)
- Support the modernisation of Colt’s SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources