Careers at Refoundry

Microsoft 365 Security & Compliance Architect (Architecture & Deployment)

Employment Type: Full-time 

The Microsoft 365 Security & Compliance Architect is a senior, hands-on technical role responsible for architecting, designing, and deploying Microsoft security and compliance solutions across customer environments. This role is accountable for taking engagements from discovery and presales through implementation and operational readiness, not just producing designs. 

 

The Architect serves as both: 

• The technical authority during presales and solution definition, and  

• The hands-on lead during deployment, configuration, and validation of Microsoft 365 security and compliance controls.  

This role operates in a consulting environment and requires comfort switching between customer-facing advisory work and deep technical execution. 

 

Core Responsibilities:

 

Presales, Discovery & Solution Definition 

• Lead security and compliance discovery workshops and technical assessments.  

• Translate business drivers, risk tolerance, and regulatory requirements into deployable Microsoft architectures, not theoretical designs.  

• Support Sales and Presales by:  

• Defining scope and assumptions  

• Identifying technical risks and dependencies  

• Contributing directly to SOWs, implementation plans, and phased roadmaps  

• Clearly articulate what will be configured, how, and why in customer-facing documentation.  

 

Architecture & Design (Practical, Deployable Designs) 

• Design end-to-end Microsoft 365 security and compliance solutions aligned to:  

• Zero Trust principles  

• Microsoft best practices  

• Customer operational maturity  

• Produce architecture and design artifacts that are intended to be implemented, including:  

• Identity and access models  

• Endpoint security baselines  

• Data protection and DLP strategies  

• Threat protection and incident response workflows  

• Define phased deployment approaches that balance speed, risk, and organizational readiness.  

 

Hands-On Deployment & Configuration 

The Architect is expected to personally deploy and configure solutions: 

Identity & Access 

• Implement and tune Microsoft Entra ID configurations:  

• Conditional Access policies  

• MFA and passwordless authentication (WHfB, Passkey/FIDO2, TAP)  

• Single Sign-On (OIDC/SAML) 

• Identity Protection policies  

• Privileged Identity Management (PIM)  

• Lifecycle Workflows for joiner/mover/leaver scenarios (Desired) 

• Configure hybrid identity integrations where required.  

 

Endpoint & Device Security 

• Onboard and operationalize Microsoft Defender for Endpoint:  

• Attack surface reduction rules  

• Device groups and policy targeting  

• Integration with Defender XDR  

 

Threat Protection & XDR 

• Deploy and configure Microsoft Defender XDR, including:  

• Defender for Office 365  

• Defender for Identity  

• Defender for Cloud Apps  

• Validate telemetry, alerts, and investigation workflows.  

• Ensure integrations across Defender components function as designed.  

 

Information Protection & Compliance 

• Implement Microsoft Purview capabilities:  

• Sensitivity labels and label policies  

• Data Loss Prevention (Endpoint, M365, Cloud Apps)  

• Data lifecycle and retention policies  

 

Validation, Handoff & Enablement 

• Validate deployed configurations against design intent.  

• Perform policy testing and non-disruptive validation where required.  

• Deliver operational handoff documentation and knowledge transfer.  

• Advise customers on ongoing tuning, operational ownership, and future roadmap phases. 

 

Required Technical Skills & Experience 

Microsoft Security & Compliance (Hands-On) 

• Microsoft Entra ID – advanced configuration experience  

• Microsoft Defender XDR – cross-solution deployment and integration  

• Microsoft Purview – real-world labeling, DLP, and retention deployments 

 

Architecture & Consulting Skills 

• Ability to design solutions that are deployable in real customer tenants  

• Strong documentation skills for:  

• Architecture diagrams  

• Design documents  

• Implementation guides  

• Comfortable leading customer discussions while also executing technical work.  

 

Experience & Background 

• 7+ years in security, identity, or Microsoft cloud roles  

• 3+ years delivering Microsoft 365 security solutions end-to-end  

• Experience in consulting, MSP, or professional services environments  

• Proven ability to own projects from discovery through deployment  

 

Certifications (Preferred) 

• Microsoft Certified: Security Solutions Architect Expert (SC100)  

• Microsoft Certified: Identity and Access Administrator (SC300)  

• Microsoft Certified: Information Protection Administrator (SC400)  

• CISSP / CCSP (nice-to-have, not required)  

 

What This Role Is Not 

• Not a whiteboard-only or advisory-only architect  

• Not a ticket-driven operations role  

• Not a junior engineering position  

 

What Success Looks Like 

• Architected solutions are successfully deployed, not shelved  

• SOWs accurately reflect technical reality  

• Customers trust you to both design and build  

• Security controls work as intended and survive real-world usage  

• Engagements scale into repeatable service offerings 

 

About Refoundry 

At Refoundry, we partner with organizations that have made significant investments in Microsoft technologies, helping them reshape the future through secure, scalable, and outcome-driven solutions. From Managed IT and Security to AI Readiness and our signature Wingman Services, we are committed to delivering a rock-solid customer experience that ensures technology investments translate into measurable value and long-term success. 

 

Submit your resume

 

 

 

Location: US; HQ is Chicago, IL (Limited onsite and Travel) 

Employment Type: Full-time 

Role Overview 

Refoundry isn’t just another MSP or MSSP—we’re redefining engagement and embedded value. As a Sales Executive, you’ll drive new client acquisition, open strategic RTM channels, and help businesses maximize their Microsoft investments. You’ll represent a brand built on security, optimization, and AI transformation, working with a team focused on measurable impact. We’re looking for someone entrepreneurial, competitive, and energized by building lasting client partnerships in a fast-moving market. 

Key Responsibilities 

• Drive net-new client acquisition through proactive outreach, networking, and relationship building. 

• Develop and manage strategic Route-to-Market (RTM) partnerships to expand Refoundry’s reach and client base. 

• Build and maintain a strong pipeline of qualified opportunities, ensuring consistent revenue growth. 

• Collaborate with marketing and technical teams to position Refoundry as the Wingman creating outcomes aligning success and strategy 

• Represent Refoundry at industry events, user groups, and partner forums to elevate brand presence. 

• Maintain accurate forecasts, activity tracking, and reporting in alignment with company growth objectives. 

Ideal Candidate 

• Proven track record in sales within IT services, MSP/MSSP, cybersecurity, or Microsoft partner ecosystems. 

• Entrepreneurial mindset with the ability to thrive in a fast-paced, growth-oriented environment. 

• Strong understanding of Microsoft 365, Azure, security, Co-Pilot and modern workplace solutions. 

• Excellent relationship builder—comfortable engaging C-level executives, technical leaders, and strategic partners. 

• Competitive, driven, and motivated by delivering measurable results for clients and the business. 

• Strong communicator who can translate complex technology solutions into clear business value. 

Why Join Refoundry 

• Opportunity to shape of our industry and client experience. 

• Be part of a high-growth team redefining the MSP/MSSP landscape. 

• Represent a premium brand built around security, optimization, and AI transformation. 

• Work in a collaborative, entrepreneurial culture where your impact is visible and valued. 

• Competitive compensation package with performance-based incentives. 

About Refoundry 

At Refoundry, we partner with organizations that have made significant investments in Microsoft technologies, helping them reshape the future through secure, scalable, and outcome-driven solutions. From Managed IT and Security to AI Readiness and our signature Wingman Services, we are committed to delivering a rock-solid customer experience that ensures technology investments translate into measurable value and long-term success. 

 

Submit your resume

 

 

Job Description:

The Microsoft AI / Copilot Architect is a senior client-facing role responsible for shaping, designing, and guiding delivery of end-to-end Copilot and agent solutions for Refoundry clients - spanning Microsoft 365 Copilot, Copilot Studio, Power Platform, and Azure AI. You will define target architecture, security and governance guardrails, and implementation patterns that accelerate adoption, reduce delivery risk, and deliver measurable business value while meeting compliance requirements.

 

You will translate business objectives into practical reference architectures and repeatable delivery playbooks covering data readiness, permission models, knowledge grounding, connector strategy, ALM, monitoring, support, and operating model decisions. You’ll lead discovery and solution design workshops, help clients prioritize high-value use cases, shape roadmaps and estimates, and guide build teams and makers to deliver Copilot agents and automations that are secure-by-design and operable in production.

 

This role requires deep Microsoft platform expertise, consulting-grade communication, and hands-on experience with LLM-powered solutions. You will partner with stakeholders across IT, Security/Compliance, and business teams to align Copilot implementations with identity, access control, data protection, and governance standards - while accelerating adoption through enablement, change management, executive communication, and success measures tied to productivity, process efficiency, risk reduction, and user adoption.

 

This role is based in the Chicago-land area with a hybrid expectation (client needs will vary). Some travel may be required.

 

Responsibilities

• Lead Copilot discovery and architecture engagements: assess readiness (data, permissions, tenant configuration), define target-state architecture, identify high-value use cases, and produce solution designs, estimates, and delivery roadmaps.
• Design and deliver Microsoft 365 Copilot extensibility and agent solutions, including Copilot Studio agents with defined knowledge sources, tools/actions, authentication, and publication channels.
• Architect governance for Copilot and Power Platform: environment strategy, DLP policies, connector controls, least-privilege access, approval patterns, and operational guardrails for logging, monitoring, audit readiness, and controlled release to production.
• Define knowledge and grounding strategies (SharePoint/Teams/OneDrive/Dataverse and other approved sources), including curation, sensitivity considerations, search configuration, and lifecycle management.
• Establish solution patterns for prompt and instruction design, conversation orchestration, testing, and evaluation to improve quality, reliability, and traceability while reducing hallucinations and data exposure risk.
• Integrate Copilot solutions with business systems using Power Platform, Power Automate, Microsoft Graph/REST APIs, and custom connectors when appropriate; guide ALM and deployment pipelines.
• Partner with client Security/Compliance teams to align with Microsoft controls (Entra ID, Conditional Access, Purview information protection, data classification, retention/eDiscovery, and audit as applicable).
• Design operational telemetry and monitoring (usage, quality signals, failures, policy violations) and integrate with client logging/SIEM solutions where applicable.
• Create clear architecture artifacts and documentation (design decisions, environments, connectors, permissions, runbooks) to enable supportability and effective handoff.
• Lead enablement and adoption: executive and maker training, prompt libraries, pilot and rollout programs, change management activities, and measurement frameworks tied to business outcomes and user adoption.
• Stay current on Microsoft AI, Copilot, and automation capabilities; evaluate new features and recommend enhancements and new client use cases.

 

Qualifications:

Required Qualifications:

• Bachelor’s degree in computer science, information systems, engineering, or equivalent practical experience.
• 5+ years of experience in Microsoft cloud and collaboration platforms (Microsoft 365/Azure) with 2+ years in solution architecture, consulting, or technical leadership roles.
• Hands-on experience with Microsoft 365 (SharePoint, Teams, OneDrive) and identity/security in Entra ID; ability to design permission models that support Copilot safely.
• Strong experience translating business processes into solution designs, requirements, and implementation plans across technical and non-technical stakeholders.
• Experience guiding delivery teams (developers, makers, admins) and communicating architecture decisions clearly; comfort with APIs, scripting, and modern development practices.
• Hands-on experience with Microsoft 365 Copilot and/or Copilot Studio (or comparable agent platforms), including prompt/instruction design, tool integration, and evaluation/testing.

 

Preferred Qualifications:

• Experience with ALM and DevOps for Power Platform and Azure (for example, Azure DevOps repos and pipelines, GitHub, and environment strategies).
• Experience with external LLM platforms and ecosystems (such as OpenAI, Anthropic Claude, or comparable tools), including model trade-offs, prompting patterns, evaluation approaches, and enterprise usage considerations.
• Working knowledge of Microsoft security and compliance capabilities (Purview, DLP, sensitivity labels, retention, audit, eDiscovery) and how they impact Copilot and automation.
• Excellent problem-solving, documentation, and communication skills; ability to lead client workshops and deliver executive-ready recommendations.

 

Submit your resume