> Markdown version of [/jobs/ext/3636246-technical-architect](https://www.wearedevelopers.com/jobs/ext/3636246-technical-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Technical Architect - **Company:** Enduir Cyber. LLC - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Application Integration Architecture, Microsoft Azure, Backup Devices, Disaster Recovery, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Multi-Factor Authentication, Monitoring of Systems, Virtual Private Networks (VPN), Routing, Windows PowerShell, Security Information and Event Management, Systems Integration, Virtual Local Area Networks, Wide Area Networks, Data Logging, Cloud Platform System, Test Scripts, Firewalls (Computer Science), Cloudformation, Sender Policy Framework (SPF), Cisco Firewalls, Bicep, Fortinet, Machine Learning Operations, Firewall Services Module, Veeam, Terraform, Splunk, Vmware - **Published:** October 8, 2026 - **Apply:** https://www.thejobnetwork.com/job/aa4c2620-7a9c-41cc-8733-be6f0abe0067/senior-technical-architect ## About the Role * Hybrid infrastructure proficiency across Active Directory and Entra, either Azure or AWS (choose one as your primary), firewalls and segmentation, backups and disaster recovery, and storage. \n * Mastery in a few areas with solid general knowledge in others. For example, deep hands-on mastery in Active Directory and one cloud platform (Azure or AWS) plus one of firewalls or backup and DR, with broader familiarity in networking, VMware, endpoint and email security, logging and SIEM, and monitoring., * Tool familiarity: common enterprise stacks such as Defender/CrowdStrike, Sentinel/Splunk, Veeam/Rubrik/Cohesity, and Palo Alto/Fortinet/Cisco firewalls (specific vendor experience is helpful but not required). ## Description We are hiring a Senior Technical Architect who can serve as the primary technical lead on remediation and modernization projects for mid-size companies. This person will bring hands on hybrid experience across on premises environments and either Azure or AWS, and should be comfortable scoping work, building pragmatic plans, and leading delivery with clear communication., n Lead discovery and baseline using Enduir's assessment approach; review Active Directory and Entra, firewall and segmentation, endpoint and email security, logging and SIEM, backups and DR, and cloud posture (Azure or AWS). \n \n * Serve as the primary technical lead: define the scope and depth of testing, identify quick wins versus structural fixes, and design remediation patterns the client can operate. \n * Provide hands on configuration for high value changes, for example AD hardening, Conditional Access and MFA, firewall rules, SIEM onboarding, and backup immutability and restore testing. \n * Lead two to three junior consultants: assign work packets, review configurations and evidence, coach on quality, and keep the team aligned to the plan. \n * Own day to day delivery, schedule, budget, risks, and sponsor communication; keep stakeholders informed with clear status and next steps. \n, n \n * Act as the technical lead for recovery in partnership with incident leaders; set the recovery plan and execution rhythm across identity, endpoints, email, logging, and backups and DR. \n * Execute critical configurations: rotate or disable compromised credentials, enforce MFA and Conditional Access, stand up clean room or bounce back infrastructure, rebuild from gold images, validate backup integrity, and perform targeted restores; expand SIEM telemetry coverage. \n * Direct two to three junior team members through endpoint rebaselining, EDR deployment, email hygiene fixes (DMARC, DKIM, SPF), and backup verification; ensure clean documentation and handoff to operations. \n * Coordinate MSPs and vendors for credential rekeys, license resets, escalations, and support cases. \n * Maintain tight cadence, issue and risk management, and budget control; communicate decisions and rollback options clearly to sponsors. \n, n \n * Own the integration architecture and cutover plan: AD consolidation or trusts, Azure or AWS landing zone alignment, VNet or VPC peering and routing, firewall policy harmonization, and backup and DR alignment. \n * Lead two to three junior consultants through migration wave planning and execution; prepare and test scripts, validate changes, and document as built configurations and runbooks for handoff. \n * Coordinate MSPs and vendors; manage dependencies, change control, and rollback paths. \n * Guide pilots and validation tests; align identity, access, and segmentation to the target security baseline and operating model. \n * Control scope, schedule, and budget; provide concise executive updates to keep sponsors aligned during cutovers and stabilization. \n, * 5-9 years in infrastructure consulting or solutions architecture delivering remediation and modernization projects for mid-size companies; comfortable as the primary technical lead and day to day driver. \n * Hybrid infrastructure mastery: deep hands-on skill in Active Directory and Entra (directory services, Group Policy, identity hardening) and one cloud platform (Azure or AWS), plus strength in at least one of firewalls and segmentation, backups and DR, or storage. \n * Breadth across adjacent areas: networking (VLANs, routing, VPN/SD-WAN), virtualization (VMware), email and endpoint security, logging and SIEM onboarding, monitoring and observability, and basic identity federation patterns. \n * Working knowledge of AI/ML tools and deployment patterns, with the ability to evaluate AI-enabled configurations and controls as part of client architecture reviews. \n * Experience advising on AI integration considerations in cross-cutting technical designs, as AI capabilities are increasingly implemented across client environments. \n * Consulting and delivery: able to scope engagements, shape SOWs, build pragmatic plans, manage scope, schedule, and budget, and provide clear executive and engineer level communication. \n * Team leadership: comfortable leading two to three junior consultants or client engineers; assigns work packets, reviews configurations and evidence, and ensures quality and alignment to plan. \n * Change event readiness: steady and structured during incidents, outages, migrations, and cutovers; plans rollback paths, manages risk and issue logs, and keeps stakeholders aligned. \n * Incident involvement: willing to participate in post incident stabilization and resilience uplift; learns quickly from incident findings and converts them into durable configuration changes. \n * Automation orientation (nice to have): PowerShell for Windows and AD tasks; Terraform or CloudFormation/Bicep for repeatable builds and guardrails.