Job Description

: Security Architect (150 hours)

Role Summary

================


Seasoned Security Architect to design and deliver an enterprise solution for Microsoft Purview (classification & governance), Data Loss Prevention (endpoint & cloud), Information Rights Management (IRM/AIP), and retention. Responsible for regulatory alignment (GDPR/PCI/HIPAA/etc.), integration with SIEM, MCAS (Microsoft Defender for Cloud Apps), and AIP/MIP Scanner. Must be Spanish-fluent and have 10+ years' relevant experience. Engagement estimated at 150 hours.

Key Responsibilities

========================

Lead solution architecture and implementation plan for Microsoft Purview, Endpoint & Cloud DLP, AIP/IRM, retention/records management. Map regulatory requirements (GDPR, HIPAA, PCI-DSS, local/regional laws) to technical controls and retention rules. Design integrations: Purview SIEM (Azure Sentinel / Splunk), DLP MCAS, AIP Scanner discovery workflows. Define classification taxonomy, sensitivity labels, retention labels, and automated labeling policies. Create architecture diagrams, data flow maps, and threat model for data in motion, at rest, and in use. Produce pilot scope, migration strategy, test plan, runbooks, rollback plan, and cutover checklist. Develop monitoring & alerting plan; map telemetry/events to SIEM use cases and SOC playbooks. Provide playbooks for IR (data exposure, data exfiltration, insider threat) including forensic evidence capture steps. Deliver Spanish-language knowledge transfer: admin guides, runbooks, and at least one training session. Perform risk assessment, gap analysis vs. current controls, and recommended remediation roadmap.

Required Qualifications & Skills

=====================================

10+ years in security architecture, data protection, or related roles. Fluent Spanish (verbal & written). Deep hands-on experience with Microsoft Purview, Microsoft Information Protection (AIP/MIP), Endpoint & Cloud DLP, AIP Scanner/MIP Scanner, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps (MCAS). Experience integrating security tooling into SIEM (Azure Sentinel, Splunk, QRadar) and building detection/use cases. Strong knowledge of retention/records management and implementing retention labels/policies in M365. Knowledge of regulatory frameworks: GDPR, HIPAA, PCI-DSS, local privacy laws; experience doing compliance mappings. Proven experience producing architectural artifacts: diagrams, runbooks, risk registers, test plans. Certifications preferred: CISSP, CISM, MS-500, AZ-500, Microsoft Purview/AIP related certs, or equivalent hands-on experience. Excellent stakeholder skills and ability to present to executive audiences in Spanish.

Deliverables

================

Architecture & Design Package (Diagrams, Data flows, Threat model). Policy Matrix mapping regulatory controls to Purview/DLP/IRM/Retention settings. Label Taxonomy & Policy Definitions (sensitivity + retention labels). Integration Plan (SIEM use cases, MCAS rules, AIP Scanner workflows). Pilot Implementation Plan & Test Cases. Runbooks & Playbooks (IR, admin tasks, classification exceptions) -- Spanish and English. Knowledge Transfer: recorded training session(s) + slide deck. Gap & Risk Report with prioritized remediation. * Final handover including configuration exports, scripts, and operating procedures.