Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Microsoft 365 Security & Compliance

Good to have skills : NA

Minimum 3 year(s) of experience is required

Educational Qualification : 15 years full time education

Directory Services Operations

Operate and maintain a hybrid identity architecture

based on on-premise Active Directory and Entra ID

in the M365 cloud

Manage Azure AD Connect synchronization, includ

ing monitoring, troubleshooting, and lifecycle man

agement

Administer Active Directory core services, including:

o Domains and trusts

o Sites and Services

o Replication topology

o DNS integration

Ensure high availability, performance, and stability

of directory services

Identity and Access Management

Administer Entra ID and Microsoft 365 tenant con

figuration

Manage and optimize:

o Conditional Access Policies

o Identity protection and authentication meth

ods

o Tenant-wide security and identity settings

Support application integrations and identity federa

tion scenarios

o Review and validate requests to ensure com

pliance with internal standards and pro

cesses

o Implement approved requests in a controlled

and auditable manner

o Access management and permission delega

tion through Quest Active Roles

Security, Hardening & Compliance

Harden AD, Entra ID, and M365 environments

based on security best practices and frameworks

(e.g. CIS Benchmarks)

Ensure:

o Least-privilege access models

o Secure authentication and authorization de

signs

o Regular review of privileged roles and access

paths

o Minimize risks for cyber-attacks or similar

vulnerabilities

Support audits, security assessments, and remedia

tion activities

Governance, Auditing and Reporting of AD by using

Quest s Active Administrator, Change Auditor, En

terprise Reporter and IT Security Search

Mergers & Acquisitions (M&A)

Support M&A activities from an identity perspec

tive, including:

o B2B collaboration and external identity ena

blement

o Migration from legacy AD and M365 environ

ments, including using Quest On-Demand

Migration

o Tenant-to-tenant and directory consolidation

scenarios

Design and execute secure migration strategies with

minimal business disruption

Backup & Recovery

AD backup and recovery through Quest Recovery

Manager

Manage Commvault Cloud (Metallic) as the M365

backup and recovery solution

Ensure:

o Regular backup validation

o Recovery readiness for identities, M365

workloads, and configurations

o Compliance with retention and recovery re

quirements

Automation & IAM Integration

Automation of tasks through PowerShell scripting

Support the design and implementation of self-ser

vice workflows for identity-related use cases

Collaborate closely with the IAM team to:

o Align AD and M365 processes with SailPoint

o Migrate or redesign existing Quest Active

Roles workflows into SailPoint

Promote automation, standardization, and reduc

tion of manual administrative effort

Service Management & Collaboration

Work within ITIL-based processes, including:

o Incident Management

o Service Request Fulfilment

o Problem Management

Act as a technical consultant for internal teams and

stakeholders

Provide 2nd and 3rd level support for identity-re

lated issues

Required Skills and Qual

ifications

Technical Skills

Strong expertise in on-premise Active Directory ar

chitecture and operations

In-depth knowledge of Entra ID and Microsoft 365

identity services

Sophisticated scripting knowledge, especially Mi

crosoft PowerShell

Hands-on experience with Azure AD Connect

Solid understanding of:

o Authentication and authorization concepts

o Identity lifecycle management

Experience with Quest Active Directory manage

ment and migration tools

Knowledge of backup and recovery concepts for

identity and M365 workloads, ideally based on

Commvault Cloud (also called Metallic)

Security & Governance

Strong understanding of identity security best prac

tices including resilience against cyber-attacks

Experience applying security frameworks (e.g. CIS)

Ability to assess risks and enforce governance

standards

Familiarity with audit, compliance, and reporting

requirements

Professional & Methodological Skills

Experience working in ITIL-based service organiza

tions

Structured, analytical, and proactive working style

High level of service orientation and customer focus

Ability to prioritize tasks and work effectively under

pressure

Strong problem-solving and troubleshooting skills

Communication & Personal Skills

Very good communication skills across technical

and non-technical stakeholders

Team-oriented mindset with the ability to work in

dependently

High level of responsibility and ownership

Resilience, flexibility, and adaptability in complex

environments

Fluent English, written and verbal (German is a plus)

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.