Solutions & Platform Architect - Microsoft

• Full-time
• Department:
  Information Technology
• Compensation: USD 145,000 - USD 165,000 - yearly

Trupanion is a leading provider of medical insurance for cats and dogs in North America. Our mission is to help loving, responsible pet owners budget and care for their pets. At Trupanion, we offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

US – Remote:

This isa remote position open to candidates anywhere in the United States. Remote candidates must be available to work Pacific Time Zone hours. Candidates based in the greater Seattle area willworka hybrid remote/in-office schedule from our casual, pet-friendly office at least 3 days a week (Tuesday, Wednesday, and Thursday).

The Solutions & Platform Architect – Microsoftserves as the organization's technical authority for Microsoft Identity, Security, Endpoint Management, and Zero Trust architecture. This role will lead the design, engineering, deployment, and operational maturity of Microsoft Entra , Identity Governance, Policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security/E5 capabilities.

The ideal candidate combines deep hands-on engineering expertise with enterprise architecture capabilities and has successfully delivered complex identity transformations including Active Directory modernization, password less authentication, cloud-first endpoint management, and Zero Trust initiatives. This individual will partner closely with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion's Microsoft platform roadmap.

Responsibilities:

Identity Modernization

• Lead Active Directory dependency reduction initiatives.
• Develop and execute Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync.
• Lead migration from Entra Connect architecture where appropriate.
• Assess and reduce authentication dependencies.
• Drive ADFS retirement planning and execution.
• Establish identity source-of-authority governance

Authentication & Access Management

• Lead Microsoft's passwordless authentication strategy.
• Implement Microsoft Authenticator and Passkeys.
• Implement Cloud Kerberos Trust architecture.
• Develop phishing-resistant authentication standards.
• Establish authentication lifecycle standards.
• Implement CIS benchmark controls through Intune.
• Modernize Windows deployment and provisioning services.
• Lead Hybrid AD to Entra Join transition strategies.
• Implement Cloud Kerberos Trust integrations.
• Design deployment and enrollment standards.

Secure Access Architecture

• Lead evaluation of Microsoft Global Secure Access.
• Design Entra Private Access architecture.
• Design Entra Internet Access architecture.
• Develop coexistence and migration strategies from Zscaler.
• Conduct proof-of-concept testing.
• Create migration roadmaps and operational support models.

Identity Governance

• Evaluate and implement Entra Identity Governance capabilities.
• Develop automated access certification processes.
• Integrate identity lifecycle management with HR systems.
• Improve role-based access governance and compliance.
• Develop Power Shell automation solutions.
• Automate provisioning and reporting.
• Reduce operational overhead through engineering practices.
• Build self-service capabilities for users and support teams.

Skills

• Independent technical ownership, mentoring, cross-functional collaboration, and clear communication with technical and non-technical audiences

Required Qualifications

• 8+ years Microsoft infrastructure engineering
• 5+ years Microsoft identity engineering
• 5+ years Microsoft 365 administration and architecture
• 5+ years Intune and endpoint engineering
• 3+ years of…