Security Architect – Greenfield Security Implementation

Experience: 8–10+ Years
Location: Remote
Engagement: Contract
Joining: Immediate / Short Notice Preferred
Role Type: Hands-on Technical Architecture & Client Consulting

Role Overview
We are looking for a highly experienced, hands-on Security Architect to lead the architecture and design phase of a live Greenfield security implementation project for a Hong Kong-based client.

The ideal candidate must have strong technical expertise across enterprise security solutions, including Proofpoint, CyberArk, ManageEngine, Microsoft Sentinel, and the broader Microsoft security ecosystem.

This role requires a client-facing professional who can independently lead technical discussions, design secure and scalable solutions, evaluate alternative approaches, and provide architectural guidance to implementation and professional services teams.

Candidates with hands-on security architecture and engineering experience are required. Governance-only, risk, or compliance-focused profiles will not be considered.

Key Responsibilities
Represent the client in technical discussions and provide recommendations on security architecture, industry best practices, and solution design.
Lead the architecture and design phase of Greenfield security implementations.
Design and architect security solutions using Proofpoint, CyberArk, ManageEngine, and Microsoft Sentinel.
Develop security architecture and integration strategies across Microsoft Defender, Microsoft Intune, Microsoft Entra ID, and related security technologies.
Design integrations between Microsoft security solutions and third-party security platforms.
Evaluate multiple technical approaches and present their advantages, disadvantages, risks, dependencies, and implementation trade-offs.
Define target-state security architecture, solution components, integration flows, and implementation roadmaps.
Prepare and maintain High-Level Design (HLD), Low-Level Design (LLD), architecture diagrams, technical specifications, and integration documentation.
Provide technical direction and architectural oversight to partner professional services and implementation teams.
Review implementation approaches and ensure alignment with the approved architecture and security requirements.
Identify technical gaps, security risks, dependencies, and potential integration challenges, and recommend practical solutions.
Communicate complex technical concepts clearly to client stakeholders and technical delivery teams.

Mandatory Technical Skills
Security Architecture: 8–10+ years of experience in security architecture, security engineering, or enterprise security solution design.
Proofpoint: Hands-on experience designing and integrating enterprise email security and threat protection solutions.
CyberArk: Strong knowledge of Privileged Access Management (PAM), privileged account security, and access control architecture.
ManageEngine: Hands-on experience with relevant enterprise security and identity/access management solutions.
Microsoft Sentinel: Experience designing SIEM solutions, security monitoring, log integration, analytics, and incident detection workflows.
Microsoft Defender Suite: Experience with relevant Defender security solutions and their integration into enterprise security architecture.
Microsoft Intune: Knowledge of endpoint management, device compliance, endpoint security policies, and integration with Microsoft security services.
Microsoft Entra ID: Experience with identity and access management, Conditional Access, authentication, and identity security.
Multi-Vendor Integration: Proven ability to design and integrate Microsoft and third-party security products.
Architecture Documentation: Experience preparing HLDs, LLDs, architecture diagrams, and implementation guidance.
Client-Facing Communication: Excellent spoken and written English, with the ability to lead technical discussions and explain complex architectural decisions.

Preferred Qualifications
Experience delivering Greenfield security architecture and implementation projects.
Experience supporting multiple clients or enterprise security transformation initiatives.
Relevant certifications such as SC-100, SC-200, CISSP, or CyberArk Defender/Sentry.
Experience coordinating with implementation partners, system integrators, and professional services teams.
Strong understanding of enterprise security best practices, identity security, endpoint protection, SIEM, and privileged access management.

Candidate Profile – What We Are Looking For
A hands-on Security Architect who can independently lead technical discussions and make architecture decisions.
Someone who can confidently engage with a Hong Kong-based client and communicate in professional English.
A technically credible professional who can challenge, evaluate, and guide implementation partners.
Someone experienced in solution design, integration planning, technical documentation, and implementation strategy.

Not a Fit
Candidates with only security governance, risk, compliance (GRC), audit, or policy management experience.
Candidates with high-level architecture knowledge but no practical implementation or engineering exposure.
Candidates lacking hands-on experience with the required security tools and Microsoft security ecosystem.
Candidates unable to independently lead client-facing technical discussions.
Candidates with experience limited to monitoring or operational support without architecture and design ownership.