M365 Architecture & Engineering Lead

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit  we're hiring: WPP Enterprise Technology provides Technology services for WPP, the world’s largest communications services group. As a creative transformation company, WPP is helping its clients transform the future through extraordinary work.

WPP ET is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands. Lead M365 architecture and senior engineering, owning the platform design and the most complex change. Combines retained architecture and senior-engineering capability for Microsoft 365. What you'll be doing:
Own the M365 architecture,standard sand engineering roadmap.

Lead and manage the M365 architects and senior engineers.

Design and assure complex M365 change and migrations.

Assure third party support provider delivered designs and change to WPP standards.

Embed security, resilience and compliance by design.

Provide senior technical escalation above the run layer.

Set the architecture, patterns and guardrails that Kyndryl implements and operates within. Assure that partner-delivered designs and changes meet WPP security, resilience and standards. Act as design authority and approval gate for partner architecture decisions. What you'll need:
Expert M365 architecture and engineering ( Exchange, Teams, SharePoint, Copilot, Copilot Studio, Power App/Automate, Power BI/Fabric, Defender and Purview).Working knowledge of enterprise identity platforms, specifically Okta, and how M365 workloads integrate with them; ability to provide architectural guidance on conditional access, authentication flows, hybrid connectivity and Zero Trust principles without directly owning the identity platform. Large-scale tenant migration and integration design at 100,000+ seat scale, with hands-on experience of tools such as Share Gate or Microsoft’s native migration tooling.

Microsoft Graph API, Power Shell scripting (Exchange Online Management Shell, PnP Power Shell, Microsoft.Graph module) and automation at enterprise scale for M365 administration and deployment. Proven ability to produce and own architecture documentation, HLD (High-Level Design) and LLD (Low-Level Design), architecture decision records (ADRs) and reference architectures as the recognised design authority. Proven vendor governance experience, including oversight of large managed service providers and holding partners accountable to contractual SLAs and agreed design standards.

Microsoft 365 certifications:
Microsoft 365 Certified:
Enterprise Administrator Expert (MS-102, or legacy MS-100/MS-101) is essential. Microsoft 365 Certified:
Security Administrator Associate, Microsoft Certified:
Azure Solutions Architect Expert, or Microsoft Certified:
Cybersecurity Architect Expert are highly desirable. Architecture framework qualification such as TOGAF 9/10 or equivalent is advantageous. Technical leadership and design authority. Recognised architecture experience in the relevant domain at enterprise scale. Relevant architecture or platform certifications (e.g. TOGAF or vendor architect tracks). Degree in a relevant discipline or equivalent experience. Sets the target architecture,standard sand design patterns for the domain.

Designs for security, scale, resilience and total cost of ownership.

Influences engineering and vendor teams without direct authority.

Balances strategic…