Full job descriptionJob OverviewWe are seeking an experienced Microsoft Data Protection and Secure Collaboration Architect to assess the organisation’s current use of Echoworx BeSecure and design a more cost-effective future approach for secure customer and partner communications, leveraging existing Microsoft 365 capabilities wherever possible.
The successful candidate will evaluate current encrypted-email and large-file-transfer requirements, assess Microsoft-native solutions, identify any remaining capability gaps and recommend an appropriate target architecture. The role will involve designing and delivering a proof of concept (PoC), validating the proposed approach and developing a practical migration and implementation roadmap.
You will work closely with technical teams and business stakeholders to balance security, compliance, cost, usability and the customer and partner experience.
Key Responsibilities*Assess the current use of Echoworx BeSecure, including secure email, encrypted communications and large-file-transfer use cases.
*Review existing customer and partner communication journeys, identifying business requirements, usability considerations, security controls and compliance needs.
*Design secure external-sharing solutions using Microsoft 365 capabilities, including SharePoint Online, OneDrive and Microsoft email encryption.
*Assess and recommend appropriate use of Microsoft Purview, Microsoft Information Protection, sensitivity labels and encryption.
*Evaluate Microsoft-native capabilities against existing requirements and identify where they can replace or reduce reliance on specialist solutions.
*Identify residual functional, security, compliance or usability gaps that may require a specialist secure-transfer solution.
*Compare solution options based on cost, risk, security, compliance, functionality and user experience.
*Design, configure and deliver a proof of concept to validate the recommended Microsoft-native secure collaboration approach.
*Test proposed solutions against agreed business scenarios, security controls and customer or partner communication requirements.
*Define the target architecture, including relevant information-protection, encryption and external-sharing controls.
*Develop a practical migration roadmap and implementation plan, including dependencies, risks, transition considerations and implementation priorities.
*Document findings, design decisions, PoC results, recommendations and implementation guidance.
*Engage technical teams and business stakeholders to validate requirements, communicate trade-offs and secure agreement on the recommended approach.
Essential Skills and Experience*Strong hands-on experience with Microsoft Purview and Microsoft Information Protection.
*Expertise in sensitivity labelling, information protection policies and encryption.
*Practical experience designing secure external collaboration and sharing using Microsoft 365.
*Experience with SharePoint Online, OneDrive and Microsoft email encryption.
*Understanding of secure customer and partner communications, including encrypted email and large-file-transfer use cases.
*Ability to assess existing specialist solutions and determine where Microsoft-native capabilities can meet business requirements.
*Experience identifying residual capability gaps and assessing when specialist secure-transfer tools remain necessary.
*Proven ability to design, deliver and test proofs of concept.
*Experience producing target architectures, migration roadmaps and implementation plans.
*Strong stakeholder engagement, technical documentation and solution evaluation skills.
*Ability to compare solutions across cost, security, compliance, risk and user experience.
Expected DeliverablesThe successful candidate will be expected to deliver:
*Current-state assessment: Review of Echoworx BeSecure usage, existing secure communication journeys and business requirements.
*Options assessment and recommendation: Comparison of Microsoft-native capabilities and specialist solutions, including costs, risks, benefits and residual gaps.
*Proof of concept: Design, implementation and testing of the proposed approach against representative business scenarios.
*Target architecture: Documented design for secure external communications using Microsoft 365 and applicable information-protection controls.
*Migration roadmap: Practical transition approach covering dependencies, risks and implementation priorities.
*Implementation plan: Clear actions and recommendations for moving towards the agreed future-state solution.
Working Arrangements*Location: London, UK.
*Working pattern: Hybrid, with three days per week onsite at the client’s office.