Solutions & Platform Architect - Microsoft

This individual will serve as a key technical authority across Microsoft Identity, Security, Endpoint Management, and Zero Trust, owning large-scale modernization initiatives across Entra ID, Intune, Windows Autopilot, Defender, Microsoft 365 security, and Global Secure Access. The ideal candidate is a deeply hands-on Microsoft engineer who can also operate at the enterprise architecture level, leading initiatives such as Active Directory modernization, passwordless authentication, cloud-first endpoint management, identity governance, automation, and Zero Trust transformation. This is a high-impact permanent opportunity for someone who wants ownership of the Microsoft platform roadmap and enjoys partnering across security, infrastructure, operations, compliance, and business teams. Day-to-Day:

Own architecture and technical direction for Microsoft Identity, Security, Endpoint Management, and Zero Trust

Lead Active Directory modernization, Entra-first architecture, Cloud Sync, authentication dependency reduction, and ADFS retirement

Develop passwordless and phishing-resistant authentication strategies using Authenticator, Passkeys, and Windows Hello for Business

Lead Intune modernization and GPO-to-Intune migration

Establish cloud-first endpoint management, CIS security, provisioning, and device lifecycle standards

Drive Hybrid AD-to-Entra Join and Windows Autopilot transformation

Evaluate Microsoft Global Secure Access and architect Entra Private Access and Internet Access

Develop coexistence and migration strategies from Zscaler

Build Identity Governance, Joiner-Mover-Leaver, access certification, and lifecycle management solutions

Integrate identity lifecycle processes with HR systems

Build PowerShell, Microsoft Graph API, REST API, and Azure Automation solutions

Automate provisioning and reporting while developing self-service capabilities

Partner with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders

Define and execute the Microsoft platform roadmap

8+ years of Microsoft infrastructure engineering experience

5+ years of Microsoft identity engineering

5+ years of Microsoft 365 administration and architecture

5+ years of Intune and endpoint engineering

3+ years of software, tools, or automation development

Deep Microsoft Entra ID expertise, including Conditional Access, Identity Governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA, and authentication flows

Strong Microsoft Intune, SCCM, Windows Autopilot, Entra Join/Hybrid Join, Windows Update for Business, CIS benchmarks, and GPO migration experience

Experience with Microsoft Global Secure Access, Entra Private Access, Entra Internet Access, and Private Application Access

PowerShell, Microsoft Graph, REST API, and Azure Automation expertise

Experience leading enterprise transformation programs

Experience designing Zero Trust architecture

Experience supporting regulated/compliance-driven environments

Ability to independently own technical architecture while mentoring and collaborating across teams

Must be authorized to work for any employer in the U.S.; visa sponsorship or transfer is not available Hands-on Active Directory modernization and dependency reduction experience

ADFS retirement and Entra-first architecture experience

Passwordless authentication, Passkeys, Windows Hello for Business, and Cloud Kerberos Trust implementation

GPO-to-Intune transformation experience

Hybrid AD-to-Entra Join migration expertise

Experience evaluating or migrating from Zscaler to Microsoft Global Secure Access

Joiner-Mover-Leaver workflow and HR system integration experience

Automated access certification and RBAC governance experience

Self-service provisioning and reporting automation experience

Strong communication with both technical and non-technical stakeholders