Microsoft Data Protection and Secure Collaboration Architect

Job Overview

We are seeking an experienced Microsoft Data Protection and Secure Collaboration Architect to assess the organisation's current use of Echoworx BeSecure and design a more cost-effective future approach for secure customer and partner communications, leveraging existing Microsoft 365 capabilities wherever possible.

The successful candidate will evaluate current encrypted-email and large-file-transfer requirements, assess Microsoft-native solutions, identify any remaining capability gaps and recommend an appropriate target architecture. The role will involve designing and delivering a proof of concept (PoC), validating the proposed approach and developing a practical migration and implementation roadmap.

You will work closely with technical teams and business stakeholders to balance security, compliance, cost, usability and the customer and partner experience.

Key Responsibilities

• Assess the current use of Echoworx BeSecure, including secure email, encrypted communications and large-file-transfer use cases.
• Review existing customer and partner communication journeys, identifying business requirements, usability considerations, security controls and compliance needs.
• Design secure external-sharing solutions using Microsoft 365 capabilities, including SharePoint Online, OneDrive and Microsoft email encryption.
• Assess and recommend appropriate use of Microsoft Purview, Microsoft Information Protection, sensitivity labels and encryption.
• Evaluate Microsoft-native capabilities against existing requirements and identify where they can replace or reduce reliance on specialist solutions.
• Identify residual functional, security, compliance or usability gaps that may require a specialist secure-transfer solution.
• Compare solution options based on cost, risk, security, compliance, functionality and user experience.
• Design, configure and deliver a proof of concept to validate the recommended Microsoft-native secure collaboration approach.
• Test proposed solutions against agreed business scenarios, security controls and customer or partner communication requirements.
• Define the target architecture, including relevant information-protection, encryption and external-sharing controls.
• Develop a practical migration roadmap and implementation plan, including dependencies, risks, transition considerations and implementation priorities.
• Document findings, design decisions, PoC results, recommendations and implementation guidance.
• Engage technical teams and business stakeholders to validate requirements, communicate trade-offs and secure agreement on the recommended approach.

Essential Skills and Experience

• Strong hands-on experience with Microsoft Purview and Microsoft Information Protection.
• Expertise in sensitivity labelling, information protection policies and encryption.
• Practical experience designing secure external collaboration and sharing using Microsoft 365.
• Experience with SharePoint Online, OneDrive and Microsoft email encryption.
• Understanding of secure customer and partner communications, including encrypted email and large-file-transfer use cases.
• Ability to assess existing specialist solutions and determine where Microsoft-native capabilities can meet business requirements.
• Experience identifying residual capability gaps and assessing when specialist secure-transfer tools remain necessary.
• Proven ability to design, deliver and test proofs of concept.
• Experience producing target architectures, migration roadmaps and implementation plans.
• Strong stakeholder engagement, technical documentation and solution evaluation skills.
• Ability to compare solutions across cost, security, compliance, risk and user experience.

Expected Deliverables

The successful candidate will be expected to deliver:

• Current-state assessment: Review of Echoworx BeSecure usage, existing secure communication journeys and business requirements.
• Options assessment and recommendation: Comparison of Microsoft-native capabilities and specialist solutions, including costs, risks, benefits and residual gaps.
• Proof of concept: Design, implementation and testing of the proposed approach against representative business scenarios.
• Target architecture: Documented design for secure external communications using Microsoft 365 and applicable information-protection controls.
• Migration roadmap: Practical transition approach covering dependencies, risks and implementation priorities.
• Implementation plan: Clear actions and recommendations for moving towards the agreed future-state solution.

Working Arrangements

• Location: London, UK.
• Working pattern: Hybrid, with three days per week onsite at the client's office.