Verified Job
IT / Software / Data Analyst
D365 Security Solution Architect ERP & Zero Trust Leader
IT / Software / Data Analyst
#700727
Remote / WFH
Job Description
D365 Security Solution Architect (Remote)
Executive Summary
The D365 Security Solution Architect is responsible for designing and governing end-to-end enterprise security architecture across Microsoft Dynamics 365 Finance & Supply Chain Management, IoT-enabled manufacturing systems, and enterprise identity platforms.
The architect ensures secure digital transformation aligned with Zero Trust principles, identity governance, and threat verification frameworks across IT and OT environments.
Ideal Candidate:
• 12+ years IT experience with 5+ years in D365 Security Architecture.
• Strong Azure Security & Active Directory expertise.
• Experience securing Manufacturing ERP landscapes.
• Exposure to OT/IT convergence ecosystems.
Responsibilities:
• Design secure D365 security models aligned with business roles.
• Implement enterprise IAM strategies with Azure AD, MFA, PIM.
• Secure IoT device communication & identity lifecycle.
• Lead threat verification, risk assessment, and SIEM integration.
• Ensure compliance with regulatory and internal audit requirements.
Key Focus Areas:
• D365 F&O Security Architecture (RBAC, SoD, Compliance)
• Identity & Access Management (IAM)
• Azure AD / Active Directory (Hybrid Identity)
• IoT Security for Smart Manufacturing
• Threat Modelling & Verification Frameworks
• Zero Trust & Conditional Access Design
Solution Scope Coverage
1️⃣ Enterprise ERP Security (D365 F&O)
• Role-based security model design (RBAC)
• Segregation of Duties (SoD) governance
• Field-level & record-level security
• Cross-legal entity access control
• Audit & compliance alignment (ISO, SOC, GDPR)
• Security design documentation & role matrix definition
2️⃣ Identity & Access Management (IAM)
• Azure AD (Entra ID) architecture
• Hybrid identity (On-Prem AD + Azure AD)
• Single Sign-On (SSO) implementation
• Conditional Access & MFA
• Privileged Identity Management (PIM)
• Access lifecycle governance (Joiner-Mover-Leaver process)
• Identity governance & periodic access reviews
3️⃣ Active Directory & Enterprise Integration
• Secure AD group design for Manufacturing operations
• B2B/B2C access management
• Federation & external vendor access
• Secure API authentication between D365 and third-party systems
4️⃣ IoT & Smart Manufacturing Security
• Secure device authentication (certificate-based)
• Encryption of shop-floor data transmissions
• Secure integration between:
• MES
• WMS
• PLC/SCADA systems
• D365 ERP
• IT/OT network segmentation architecture
• Secure cloud-to-edge communication design
5️⃣ Threat Verification & Risk Management Framework
• Threat modeling (STRIDE / MITRE ATT&CK frameworks)
• Vulnerability assessment coordination
• Penetration test governance
• Security monitoring via:
• Microsoft Defender
• Azure Sentinel
• SIEM platforms
• Incident response planning
• Continuous security posture assessment
Architecture Deliverables
• Enterprise Security Architecture Blueprint
• D365 Role & SoD Matrix
• IAM Governance Framework
• IoT Security Design Document
• Threat Verification & Monitoring Framework
• Risk Register & Mitigation Plan
• Compliance Mapping Documentation
Technical Competency Requirements
• Microsoft Dynamics 365 F&O Security Architecture
• Azure Security & Identity Services
• Active Directory (Hybrid)
• IoT Security Design
• Cloud & Network Security Principles
• Zero Trust Architecture
• Manufacturing ERP Ecosystem Knowledge
Industry Domain Expertise
• Discrete & Process Manufacturing
• Supply Chain Security Controls
• IT/OT Convergence Security
Engagement Model
The architect will:
• Lead security design workshops
• Conduct security gap assessments
• Define governance standards
• Collaborate with Infrastructure, OT, and Compliance teams
• Provide security sign-off before production deployments
Certifications (Preferred)
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Identity & Access Administrator
• CISSP (Certified Information Systems Security Professional) / CISM (Certified Information Security Manager)
• TOGAF (The Open Group Architecture Framework) - Enterprise Architecture
Executive Summary
The D365 Security Solution Architect is responsible for designing and governing end-to-end enterprise security architecture across Microsoft Dynamics 365 Finance & Supply Chain Management, IoT-enabled manufacturing systems, and enterprise identity platforms.
The architect ensures secure digital transformation aligned with Zero Trust principles, identity governance, and threat verification frameworks across IT and OT environments.
Ideal Candidate:
• 12+ years IT experience with 5+ years in D365 Security Architecture.
• Strong Azure Security & Active Directory expertise.
• Experience securing Manufacturing ERP landscapes.
• Exposure to OT/IT convergence ecosystems.
Responsibilities:
• Design secure D365 security models aligned with business roles.
• Implement enterprise IAM strategies with Azure AD, MFA, PIM.
• Secure IoT device communication & identity lifecycle.
• Lead threat verification, risk assessment, and SIEM integration.
• Ensure compliance with regulatory and internal audit requirements.
Key Focus Areas:
• D365 F&O Security Architecture (RBAC, SoD, Compliance)
• Identity & Access Management (IAM)
• Azure AD / Active Directory (Hybrid Identity)
• IoT Security for Smart Manufacturing
• Threat Modelling & Verification Frameworks
• Zero Trust & Conditional Access Design
Solution Scope Coverage
1️⃣ Enterprise ERP Security (D365 F&O)
• Role-based security model design (RBAC)
• Segregation of Duties (SoD) governance
• Field-level & record-level security
• Cross-legal entity access control
• Audit & compliance alignment (ISO, SOC, GDPR)
• Security design documentation & role matrix definition
2️⃣ Identity & Access Management (IAM)
• Azure AD (Entra ID) architecture
• Hybrid identity (On-Prem AD + Azure AD)
• Single Sign-On (SSO) implementation
• Conditional Access & MFA
• Privileged Identity Management (PIM)
• Access lifecycle governance (Joiner-Mover-Leaver process)
• Identity governance & periodic access reviews
3️⃣ Active Directory & Enterprise Integration
• Secure AD group design for Manufacturing operations
• B2B/B2C access management
• Federation & external vendor access
• Secure API authentication between D365 and third-party systems
4️⃣ IoT & Smart Manufacturing Security
• Secure device authentication (certificate-based)
• Encryption of shop-floor data transmissions
• Secure integration between:
• MES
• WMS
• PLC/SCADA systems
• D365 ERP
• IT/OT network segmentation architecture
• Secure cloud-to-edge communication design
5️⃣ Threat Verification & Risk Management Framework
• Threat modeling (STRIDE / MITRE ATT&CK frameworks)
• Vulnerability assessment coordination
• Penetration test governance
• Security monitoring via:
• Microsoft Defender
• Azure Sentinel
• SIEM platforms
• Incident response planning
• Continuous security posture assessment
Architecture Deliverables
• Enterprise Security Architecture Blueprint
• D365 Role & SoD Matrix
• IAM Governance Framework
• IoT Security Design Document
• Threat Verification & Monitoring Framework
• Risk Register & Mitigation Plan
• Compliance Mapping Documentation
Technical Competency Requirements
• Microsoft Dynamics 365 F&O Security Architecture
• Azure Security & Identity Services
• Active Directory (Hybrid)
• IoT Security Design
• Cloud & Network Security Principles
• Zero Trust Architecture
• Manufacturing ERP Ecosystem Knowledge
Industry Domain Expertise
• Discrete & Process Manufacturing
• Supply Chain Security Controls
• IT/OT Convergence Security
Engagement Model
The architect will:
• Lead security design workshops
• Conduct security gap assessments
• Define governance standards
• Collaborate with Infrastructure, OT, and Compliance teams
• Provide security sign-off before production deployments
Certifications (Preferred)
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Identity & Access Administrator
• CISSP (Certified Information Systems Security Professional) / CISM (Certified Information Security Manager)
• TOGAF (The Open Group Architecture Framework) - Enterprise Architecture
