Domain Architect

Pen Fed is hiring a (Hybrid) Domain Architect at our Tysons, Virginia location. The primary purpose of this role is to define and lead the enterprise strategy, architecture, governance, and modernization of digital workplace technologies. Serving as the senior technical authority for Microsoft 365, endpoint management, cloud identity, collaboration, security, automation, and enterprise AI services, this role translates business priorities and risk requirements into secure, scalable, and supportable solutions.

The architect will establish standards and roadmaps, guide complex transformation initiatives, and partner across Technology, Information Security, Risk, and business teams to improve employee productivity while meeting operational, regulatory, and compliance obligations.

Equivalent combination of education and experience is considered.

• Bachelor’s degree in information technology, computer science, engineering, or a related field.
• At least 10 years of progressive enterprise technology experience, including five or more years in architecture, engineering, or senior technical leadership roles.
• Deep expertise across Microsoft 365, including Microsoft Teams, SharePoint Online, One Drive for Business, Exchange Online, Microsoft Purview, Power Platform, Microsoft Entra , Microsoft Intune, Windows Autopilot, and Microsoft Copilot.
• Demonstrated experience developing enterprise architecture strategies, capability roadmaps, standards, reference architectures, decision records, and governance processes.
• Extensive experience designing and governing enterprise collaboration, productivity, endpoint, identity, information-protection, and security services.
• Experience modernizing Active Directory and Microsoft Entra , including hybrid-to-cloud identity transitions, Conditional Access, Identity Governance, passwordless authentication, privileged access, and device-based access controls.
• Strong knowledge of Zero Trust architecture, information protection, data loss prevention, records and retention controls, eDiscovery, privacy, and regulatory requirements.
• Experience implementing and governing enterprise generative AI and agentic AI capabilities, including data boundaries, access controls, lifecycle management, monitoring, and responsible-use standards.
• Experience integrating Microsoft 365 and identity services with Azure, AWS, SaaS platforms, and enterprise applications.
• Experience developing automation and integration solutions using Power Shell, Microsoft Graph, REST APIs, Azure Automation, or comparable platforms.
• Experience evaluating technology products, leading proofs of concept, defining nonfunctional requirements, and guiding complex migrations and platform transformations.
• Excellent written and verbal communication, stakeholder management, facilitation, and influencing skills, including the ability to explain technical tradeoffs to executive and nontechnical audiences.
• Experience directing vendors and service providers and leading cross-functional teams in a matrixed environment.
• Experience supporting financial services, banking, credit unions, or another highly regulated industry is preferred.
• Experience with Tanium for endpoint visibility, software deployment, patching, vulnerability remediation, and security operations is preferre
• Provides matrixed technical leadership to architects, engineers, project teams, and cross-functional delivery teams.
• Provides technical oversight and performance direction for third-party vendors and service providers within assigned initiatives.
• Experience using A.I. tools preferred.

This position will not supervise employees.

• One or more advanced Microsoft certifications are preferred, such as Azure Solutions…