Security Solutions Architect

Required Qualifications

Minimum of 7 years of experience in information security, IT security, or IT administration, including customer-facing or pre-sales technical work.

Demonstrated ability to scope and document security engagements — SOWs, WBS with hours, and technical proposals.

Hands-on familiarity with the Microsoft security stack (Entra/IAM and at least one of Purview or Intune).

Working knowledge of at least one major compliance framework (CMMC/NIST 800-171, NIST CSF, or ISO 27001) and the ability to translate framework requirements into a remediation roadmap.

Understanding of enterprise security concepts and technologies — MDR/EDR, email security, and how a SOC operates.

Knowledge of data governance and data protection best practices.

Excellent verbal and written communication skills, including the ability to present to and influence C-suite stakeholders.

Proficiency with CRM-based opportunity management (Salesforce) and disciplined documentation habits.

Ability to establish and maintain positive, effective relationships with coworkers, clients, and partners.

Preferred Qualifications

• Depth in Microsoft Purview (DLP, Insider Risk, Data Classification, DSPM for AI) and/or Intune and Entra ID.

• The Microsoft Entra Suite (including Entra ID Governance, Private Access, Internet Access, and Verified ID) and Microsoft Agent 365 (AI agent governance and security) — both increasingly important to the role.

• Experience with MXDR / SentinelOne and security operations positioning.

• Experience with Microsoft Defender XDR and Microsoft Defender for Cloud is a plus.

• Azure cloud architecture and security design experience — secure landing zones, network and identity architecture, and Azure security services — is ideal.

• Experience with third-party risk platforms and methodology (e.g., OSINT) and vendor-risk program scoping.

• Familiarity with Microsoft 365 tenant migration/consolidation and Copilot adoption engagements.

• Experience developing and facilitating Microsoft Envisioning Workshops — or equivalent value-demonstration and hands-on workshops — across the full engagement lifecycle.

• Knowledge of AI security best practices and emerging AI-governance requirements.

• Expert knowledge of Zero Trust principles; strong email-security and networking knowledge.

• Familiarity with FISMA, CIS Controls, and additional cloud platforms (AWS, GCP).

• Experience developing channel partners, TAs, and CSP relationships within a partner-led sales motion.

• Experience teaching or enabling technical content, formally or informally.

• Certifications

• Candidates are expected to achieve and maintain relevant technical certifications. CISSP and the Microsoft certifications tied to Avertium’s core focus areas — data security and governance, identity, endpoint, and security operations — are strongly preferred.

• CISSP (ISC2) — the baseline security credential for this role; required or strongly preferred.

• Microsoft Information Protection & Compliance Administrator (SC-400) — aligned to Microsoft Purview — DLP, Insider Risk Management, Data Classification, and DSPM for AI.

• Microsoft Identity & Access Administrator (SC-300) — aligned to Microsoft Entra ID and Identity & Access Management.

• Microsoft Endpoint Administrator (MD-102) — aligned to Microsoft Intune device management and policy.

• Microsoft Security Operations Analyst (SC-200) — aligned to MXDR, Microsoft Defender, and Security Copilot.

• Microsoft Cybersecurity Architect (SC-100) — expert-level credential; strongly preferred for Principal SSAs.

• Microsoft Azure — AZ-500 (Azure Security Engineer) and AZ-305 (Azure Solutions Architect Expert) are ideal, reflecting the role’s Azure architecture and security focus.

• Additional credentials a plus — Microsoft SC-900 (Security, Compliance & Identity Fundamentals), MS-102 (Microsoft 365 Administrator); CISM or CISA; CMMC (CCP/CCA); ISO 27001; and SentinelOne certifications.

• Core Competencies

• Consultative selling — frames technical solutions in business terms and earns trusted-advisor status.

• Ownership & reliability — drives opportunities to closure and keeps documentation current so no account depends on a single person.

• Communication & executive presence — clear, confident, and credible with both engineers and executives.

• Collaboration — works seamlessly with AEs, delivery, partners, and leadership.

• Adaptability & curiosity — continuously builds expertise as the Microsoft and AI-security landscape evolves.

• Partner orientation — cultivates the channel relationships that fuel pipeline.

• Travel & Work Environment

• This position requires up to 25% travel; travel is frequently outside the local area and may include overnight stays.

• Travel supports client meetings, partner site visits, bake-offs, and onsite sales engagements.

• Remote-first with regional alignment to the assigned territory and partner ecosystem.