Principal Enterprise Architect

We are looking for a Principal Enterprise Architect to join our Enterprise Architecture team. This is an opportunity to serve as the senior technical authority for a Microsoft cloud environment spanning Azure, Microsoft 365, Entra, identity and access management, endpoint management, collaboration, security, compliance and Microsoft developer platforms. This is a hands-on technical role that provides direction to engineers, security specialists, service owners, implementation partners and managed service providers without traditional people-management responsibility.

A successful candidate must be able to design and establish a secure, standalone Microsoft environment while also remaining close enough to the technology to review configurations, resolve complex issues, challenge designs and make definitive technical decisions. We would love to speak with you if you bring deep Microsoft Entra, identity, Microsoft 365 and Azure architecture expertise, including experience designing or separating tenants, cloud environments or enterprise identity platforms.

• experience, education, skills, and accomplishments
• Bachelor's or Master's degree, or equivalent practical experience, in computer science, engineering, information systems or a related technical discipline.
• At least 12 years of experience in enterprise infrastructure, cloud, identity, security or Microsoft platform architecture.
• 12 years of experience as a Principal Architect, Lead Architect or senior technical authority in a complex enterprise environment.
• Deep hands-on expertise in Microsoft Entra , identity and access management, Conditional Access, MFA, privileged identity and application integration.
• Strong technical experience across Microsoft 365, Exchange Online, SharePoint Online, One Drive and Teams, plus Microsoft Intune, device compliance, application deployment and modern endpoints.
• Strong Azure architecture and engineering experience, including landing zones, subscriptions, management groups, RBAC, policy, monitoring and security.
• Practical experience with Microsoft Defender and Microsoft Purview capabilities, with working knowledge of Teams Phone, Power Platform, Copilot, Power BI, Microsoft Fabric, Git Hub and Visual Studio.
• Experience designing or separating Microsoft tenants, Azure environments or enterprise identity platforms.
• Demonstrated ability to review detailed configurations, identify technical risks, provide implementable solutions and direct implementation partners through technical authority rather than line management.
• Corporate carve-out, separation, merger, tenant migration or TSA exit experience, including greenfield Microsoft 365 and Entra tenant implementation.
• Experience with Microsoft 365 E5 security and compliance, Identity Governance, Privileged Identity Management, Identity Protection, workload identity, Microsoft Sentinel or Defender XDR integration.
• Experience with Azure AI services, enterprise Copilot architecture, Power Platform managed environments or Copilot Studio governance.
• Experience with Git Hub Enterprise, Git Hub Actions, Git Hub Advanced Security, Power BI and Microsoft Fabric tenant administration, or enterprise voice and Teams Phone architecture.
• Automation experience using Power Shell, Microsoft Graph, Azure CLI, Bicep, Terraform or equivalent infrastructure-as-code tooling, and relevant Microsoft expert-level certifications.

• Microsoft architecture and roadmap:
  Own the end-to-end technical architecture, engineering standards, configuration baselines, integration patterns and lifecycle plans for the Microsoft ecosystem.
• Identity, Microsoft 365 and endpoints:
  Define and govern architecture across Entra , identity lifecycle, access controls, Exchange Online, SharePoint Online, One Drive, Teams, Intune, Autopilot and modern device management.
• Security, compliance and collaboration:
  Set architecture for Defender, Sentinel, Purview, information protection, data loss prevention, retention, audit, eDiscovery, Teams Phone, meetings, conferencing and voice.
• Copilot, Power Platform and analytics:
  Own technical architecture and governance for Microsoft 365 Copilot, Copilot Studio, Power Apps, Power Automate, Power BI and Microsoft Fabric in partnership with business and data teams.
• Azure and developer platforms:
  Own Azure architecture and landing-zone standards and establish governance for Git Hub, Git Hub Actions, Git Hub Copilot, Visual Studio and related developer services.
• Technical assurance and operations:
  Act as the highest-level technical escalation point, review designs and configurations, challenge partners and ensure the environment transitions from implementation and hyper-care into stable operations.

The Enterprise Architecture function works across engineering, operations, cybersecurity, data and application teams. This role provides technical direction to engineers, security specialists, service owners, implementation partners and managed service providers, and…