Senior M365 Architect

Key Responsibilities 

• Architect the end-to-end Microsoft 365 tenant strategy covering Exchange Online, Teams, SharePoint, OneDrive, Intune, Defender, and Purview. 

• Design migration architectures for On-Prem Exchange, Google Workspace, and M365 tenant-to-tenant consolidations. 

• Architect identity and access management using Entra ID — including hybrid identity, SSO, MFA, PIM, YubiKey enforcement, and Conditional Access. 

• Define and govern tenant configuration standards, licence models, admin role hierarchies, and Teams / SharePoint governance frameworks. 

• Architect email security posture using Mimecast and/or Barracuda, including filtering, archiving, continuity, and threat protection policies. 

• Lead technical design for M&A tenant consolidations and divestiture scenarios. 

• Produce HLD/LLD architecture documentation and present to senior leadership and executive stakeholders. 

• Provide technical oversight across migration engineers and Intune specialists during delivery. 

Required Qualifications 

• 6+ years Microsoft 365 architecture experience across multiple workloads. 

• Proven track record architecting and delivering complex M365 migrations (minimum two paths: Exchange hybrid, Google Workspace, or tenant-to-tenant). 

• Deep expertise in Entra ID / Azure AD — hybrid identity, Azure AD Connect, SSO, Conditional Access, and PIM. 

• Strong knowledge of Mimecast or Barracuda platform architecture and integration with M365 mail flow. 

• Experience architecting YubiKey or hardware MFA enforcement across an enterprise user base. 

• Ability to produce and present HLD/LLD documentation to both technical and executive audiences. 

Required Certifications 

• Microsoft MS-102 (Enterprise Administrator Expert) — required or willingness to obtain. 

• Microsoft SC-300 (Identity and Access Administrator) — required or willingness to obtain. 

• Microsoft SC-400 (Information Protection and Compliance Administrator) — required or willingness to obtain. 

• Mimecast Certified Associate or higher — required or willingness to obtain. 

• Barracuda Technical Specialist (Email Security or Backup) — required or willingness to obtain. 

• YubiKey / Yubico platform training — willingness to obtain required. 

Candidates who do not hold the above certifications will be offered access to unpaid self-paced certification resources as part of onboarding to support role readiness.