Microsoft Data Protection and Secure Collaboration Architect

We are seeking an experienced Microsoft Data Protection and Secure Collaboration Architect to assess the organisation’s current use of Echoworx BeSecure and design a more cost-effective future approach for secure customer and partner communications, leveraging existing Microsoft 365 capabilities wherever possible.

The successful candidate will evaluate current encrypted-email and large-file-transfer requirements, assess Microsoft-native solutions, identify any remaining capability gaps and recommend an appropriate target architecture. The role will involve designing and delivering a proof of concept (PoC), validating the proposed approach and developing a practical migration and implementation roadmap.

You will work closely with technical teams and business stakeholders to balance security, compliance, cost, usability and the customer and partner experience.

• Assess the current use of Echoworx BeSecure, including secure email, encrypted communications and large-file-transfer use cases.
• Review existing customer and partner communication journeys, identifying business requirements, usability considerations, security controls and compliance needs.
• Design secure external-sharing solutions using Microsoft 365 capabilities, including SharePoint Online, OneDrive and Microsoft email encryption.
• Assess and recommend appropriate use of Microsoft Purview, Microsoft Information Protection, sensitivity labels and encryption.
• Evaluate Microsoft-native capabilities against existing requirements and identify where they can replace or reduce reliance on specialist solutions.
• Identify residual functional, security, compliance or usability gaps that may require a specialist secure-transfer solution.
• Compare solution options based on cost, risk, security, compliance, functionality and user experience.
• Design, configure and deliver a proof of concept to validate the recommended Microsoft-native secure collaboration approach.
• Test proposed solutions against agreed business scenarios, security controls and customer or partner communication requirements.
• Define the target architecture, including relevant information-protection, encryption and external-sharing controls.
• Develop a practical migration roadmap and implementation plan, including dependencies, risks, transition considerations and implementation priorities.
• Document findings, design decisions, PoC results, recommendations and implementation guidance.
• Engage technical teams and business stakeholders to validate requirements, communicate trade-offs and secure agreement on the recommended approach.

• Strong hands-on experience with Microsoft Purview and Microsoft Information Protection.
• Expertise in sensitivity labelling, information protection policies and encryption.
• Practical experience designing secure external collaboration and sharing using Microsoft 365.
• Experience with SharePoint Online, OneDrive and Microsoft email encryption.
• Understanding of secure customer and partner communications, including encrypted email and large-file-transfer use cases.
• Ability to assess existing specialist solutions and determine where Microsoft-native capabilities can meet business requirements.
• Experience identifying residual capability gaps and assessing when specialist secure-transfer tools remain necessary.
• Proven ability to design, deliver and test proofs of concept.
• Experience producing target architectures, migration roadmaps and implementation plans.
• Strong stakeholder engagement, technical documentation and solution evaluation skills.
• Ability to compare solutions across cost, security, compliance, risk and user experience.

The successful candidate will be expected to deliver:

• Current-state assessment: Review of Echoworx BeSecure usage, existing secure communication journeys and business requirements.
• Options assessment and recommendation: Comparison of Microsoft-native capabilities and specialist solutions, including costs, risks, benefits and residual gaps.
• Proof of concept: Design, implementation and testing of the proposed approach against representative business scenarios.
• Target architecture: Documented design for secure external communications using Microsoft 365 and applicable information-protection controls.
• Migration roadmap: Practical transition approach covering dependencies, risks and implementation priorities.
• Implementation plan: Clear actions and recommendations for moving towards the agreed future-state solution.

• Location: London, UK.
• Working pattern: Hybrid, with three days per week onsite at the client’s office.