Lead Technology Architect

Job Summary

Agility is looking for a Lead Technology Architect to serve as the senior‑most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments. This hands‑on leadership role requires you to personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of one to two administrators. You will own critical decisions end‑to‑end with no higher technical authority within the function.

The portfolio spans Microsoft Entra , Active Directory, Exchange Online Hybrid, Microsoft Teams and SBC voice, SharePoint, One Drive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude, Microsoft Copilot), and a large SSO application integration portfolio.

• Administer Microsoft Entra  on‑premises AD across all environments.
• Design and maintain Conditional Access, PIM, RBAC, MFA and SSO (OAuth, OIDC, SAML).
• Own hybrid identity via Entra Connect.

• Administer Exchange Online and Exchange Server hybrid, including DAG, mail flow, and transport rules.
• Own email security gateway, DMARC, DKIM, SPF, and manage mailbox migrations.

• Administer Microsoft Teams policies, governance, and SBC‑based enterprise voice dial plans.
• Manage call queues, PSTN, SharePoint Online, and One Drive, including external sharing and Known Folder Move.

• Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR) and establish security baselines.
• Lead incident response and maintain hardening controls aligned to CIS benchmarks.

• Manage a mid‑to‑large multi‑country fleet of Windows, macOS, Android, and iOS devices.
• Own Autopilot compliance configuration policies, update rings, app packaging, and Power Shell remediation scripts.

• Manage full SSL/TLS certificate lifecycle and DNS (CDN, WAF, DDoS) platforms.
• Own domain governance, registrations, and the web publishing approval workflow.

• Administer enterprise AI platforms including Claude integrations and Microsoft Copilot.
• Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing.

• Act as technical design authority, maintain standards, runbooks, and documentation.
• Lead, mentor, and delegate to a small admin team.
• Serve as final escalation point and on‑call for critical incidents.

• Bachelor's degree in Computer Science, IT, Engineering, or related field (Master's preferred). Exceptional hands‑on experience may be considered in lieu of formal qualifications.

• 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise.
• 5–7 years in a senior architect or technical lead role owning M365 environments end‑to‑end.
• Proven hands‑on experience with Exchange hybrid, Entra /AD, Intune at scale, and Microsoft Defender.
• Practical experience with enterprise AI platforms (Claude, Microsoft Copilot) including workflow design and data modeling.

• MS‑102 – Microsoft 365 Enterprise Administrator Expert
• SC‑300 – Identity and Access Administrator Associate
• SC‑200 – Security Operations Analyst Associate
• MD‑102 – Endpoint Administrator Associate
• MS‑700 – Teams Administrator Associate
• AZ‑104 – Azure Administrator Associate
• MS‑203 – Messaging Administrator Associate (or equivalent)

• Based in Kuwait or willing to relocate; on‑site at Kuwait Head Office.
• Eligible to hold Global Administrator / privileged access (enhanced background screening may apply).
• Fluent professional English;
  Arabic is an advantage.
• On‑call availability for critical incidents.

• Excellent problem‑solving skills and attention to detail.
• Effective communication and collaboration skills.
• Ability to work independently and handle multiple tasks.
• Analytical and troubleshooting skills.
• Stakeholder management, technical leadership & collaborative influence, operational excellence & adaptive delivery, strategic problem‑solving & architecture design.
• Fluent professional English;
  Arabic is an advantage.