Microsoft 365 - Azure Architect

This role is hybrid in Los Angeles, CA.

We are seeking a hands-on Microsoft 365 - Azure Architect to lead the design, security, governance, and optimization of a large enterprise Microsoft environment. This role will oversee Microsoft 365, Azure, identity, security controls, and hybrid infrastructure connecting cloud and on-premises systems.

The ideal candidate is a senior technical expert with deep experience across Microsoft 365, Azure, Entra , cybersecurity, and enterprise infrastructure. This person should be able to translate security, compliance, and business needs into scalable Microsoft platform solutions that improve reliability, performance, and risk posture.

Key Responsibilities

• Own the architecture, configuration, and lifecycle of the Microsoft 365 tenant, including Exchange Online, SharePoint, One Drive, Teams, and related services.
• Define and enforce policies for identity, licensing, DLP, retention, eDiscovery, information protection, and platform governance.
• Manage hybrid identity using Microsoft Entra , Entra Connect, Conditional Access, PIM, and Active Directory.
• Architect and govern Azure subscriptions, management groups, policies, networking, security, and platform standards.
• Design, harden, and optimize Azure infrastructure, including virtual machines, storage, backup, patching, encryption, and access controls.
• Implement and tune Microsoft Defender, Sentinel, Azure Monitor, and related security/monitoring tools.
• Partner with security and infrastructure teams to translate requirements into enforceable Microsoft platform controls.
• Maintain alignment with security frameworks such as NIST, CIS, Zero Trust, and other compliance requirements.
• Establish secure configuration baselines and reduce technical debt across Microsoft 365 and Azure.

Required Qualifications

• 8+ years of experience designing and supporting enterprise Microsoft environments.
• 5+ years of hands-on Microsoft 365 and Azure experience at enterprise scale.
• Strong Microsoft 365 administration experience, including tenant governance and collaboration platforms.
• Strong Azure experience across IaaS, PaaS, networking, storage, identity, security, and governance.
• Deep knowledge of Entra , Active Directory, Group Policy, Windows Server, and hybrid infrastructure.
• Experience applying security frameworks and configuration standards to Microsoft cloud environments.
• Strong Power Shell skills, including Microsoft Graph, Exchange Online, and Azure modules.
• Excellent communication skills with both technical and executive audiences.

Preferred Qualifications

• Experience in a regulated or complex enterprise environment.
• Microsoft certifications such as Azure Solutions Architect Expert, Cybersecurity Architect Expert, Identity and Access Administrator, or Microsoft 365 Administrator Expert.
• Experience with Sentinel, Defender XDR, Purview, Intune, Git Hub, Azure Dev Ops, or infrastructure as code.
• CISSP, CCSP, or similar security certification.