Solutions & Platform Architect - Microsoft

Description

This is a technical authority role for Microsoft identity, security, endpoint management and Zero Trust architecture.

You will own the design, build, rollout and ongoing maturity of Microsoft Entra ID, Identity Governance, policies, Intune, Windows Autopilot, Defender, Global Secure Access and Microsoft 365 security and E5 features.

The ideal person pairs hands-on engineering with enterprise architecture and has delivered major identity work, such as moving off Active Directory, going passwordless, managing endpoints from the cloud and running Zero Trust programs.

You will work with operations, security, infrastructure, compliance, the service desk and business leads to shape and deliver the company's Microsoft platform roadmap.

The company provides medical insurance for cats and dogs across North America.

Responsibilities

• Reduce reliance on Active Directory and lead the move to an Entra-first identity architecture.
• Design and roll out Entra Cloud Sync, and lead any move away from Entra Connect where it makes sense.
• Cut authentication dependencies and plan and carry out the ADFS retirement.
• Set rules for which system is the source of authority for identities.
• Set the passwordless strategy and roll out Microsoft Authenticator and passkeys.
• Design the Windows Hello for Business deployment and build out Cloud Kerberos Trust.
• Define phishing-resistant authentication standards and authentication lifecycle standards.
• Lead the Intune transformation.
• Set cloud-first endpoint management standards and run GPO-to-Intune migrations.
• Apply CIS benchmark controls through Intune.
• Modernize Windows deployment and provisioning, and define device lifecycle standards.
• Lead the shift from hybrid AD join to Entra join.
• Redesign Autopilot, and define deployment and enrollment standards.
• Remove legacy dependencies that block modern deployments.
• Lead the evaluation of Microsoft Global Secure Access.
• Design Entra Private Access and Entra Internet Access, and run proof-of-concept tests.
• Plan coexistence and migration away from Zscaler, with roadmaps and operational support models.
• Evaluate and implement Entra Identity Governance features.
• Design joiner-mover-leaver workflows that connect to HR systems.
• Build automated access certification and strengthen role-based access governance and compliance.
• Write PowerShell automation and use Microsoft Graph APIs.
• Automate provisioning and reporting, and build self-service tools for users and support teams.
• Reduce operational overhead through engineering practices.

Requirements

• Working knowledge of Microsoft Entra ID, Conditional Access, identity governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA and authentication flows.
• Working knowledge of Microsoft Intune, SCCM, Autopilot, Entra join, hybrid join, Windows Update for Business, CIS benchmarks and GPO migration.
• Working knowledge of GSA, Entra Private Access, Entra Internet Access and Private Application Access.
• Working knowledge of PowerShell, Microsoft Graph, REST APIs and Azure Automation.
• Ability to own technical work independently, mentor others, collaborate across functions, and communicate clearly with technical and non-technical audiences.
• 8+ years of Microsoft infrastructure engineering.
• 5+ years of Microsoft identity engineering.
• 5+ years of Microsoft 365 administration and architecture.
• 5+ years of Intune and endpoint engineering.
• 3+ years of software, tools or automation development.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.
• Experience supporting regulated or compliance-driven environments.

Conditions

Open only to candidates in the Seattle, WA area in the US.

Hybrid schedule: work from the casual, pet-friendly office at least 3 days a week, on Tuesdays, Wednesdays and Thursdays.

Full-time position with a base salary of $145,000 to $165,000.

You must be authorized to work for any US employer. The company cannot sponsor or take over sponsorship of an employment visa at this time.

The company is an equal-opportunity employer that values diversity.

Benefits

• Full medical, dental and vision coverage at no cost to you.
• Eligibility for monthly bonuses on top of base pay.
• Restricted Stock Units granted to every new hire, vesting over 4 years.
• 4 weeks of paid time off plus 9 paid float holidays, which you choose.
• 5-week sabbatical after 5 years of employment.
• Free medical insurance for one pet, a dog or a cat.
• Paid time off to volunteer at nonprofit organizations.
• Seattle office perks: free on-site gym, free dog walking for office pets during business hours, free parking and paid ORCA cards.