Microsoft Engineer/Architect

This role will collaboratively support a global strategic objective to harmonize the end-to-end Microsoft lifecycle and environment spanning the enterprise. Design, implement, and operationalize enterprise solutions on the Microsoft stack (Azure, Microsoft 365, Intune, Purview, SCCM, Defender, AD connect, Active Directory, ect...).

Key responsibilities:

• Lead architecture, design, and delivery of Microsoft-based solutions (Azure IaaS/PaaS, hybrid identity, Microsoft 365, Active Directory).
• Plan and execute cloud migrations and integrations (lift-and-shift, re-platform, refactor).
• Experience with tools like Quest, BitTitan, ect..
• Implement identity, security, networking, and governance controls (Azure AD, Conditional Access, RBAC, policies, MFA and Federation Technologies).
• Build automation and infrastructure-as-code (ARM, Bicep, Terraform, PowerShell) to accelerate deployments and enforce standards.
• Provide production support, troubleshooting, performance tuning, and incident response.
• Create technical designs and documents, runbooks, run knowledge-transfer/training sessions, and produce documentation.
• Integrated on-premises Active Directory with Azure Active Directory, enabling hybrid identity management & secure cloud resources
• Enhanced security and operational efficiency via identity and access management strategies in complex enterprise environments
• Mentor junior engineers and collaborate with cross-functional teams (network, security, devops, application owners).
• Deep AD experience (designing, operating, securing, troubleshooting, migrating and recovering Windows AD environments at scale (single domain to multi forest), plus automation, monitoring and hybrid identity integration)
• Implement device compliance, Conditional Access integration, app protection policies (MAM), application lifecycle and update rings.

• 4-7+ years in systems/solution engineering or cloud architecture with proven Microsoft stack experience.
• Hands-on Azure experience: Compute, networking, storage, identity, and PaaS services.
• Strong knowledge of Active Directory, Azure AD, hybrid identity, and Microsoft 365 workloads.
• Scripting/automation: PowerShell, CLI; familiarity with Terraform, Bicep, or ARM templates.
• Networking fundamentals: VNets, ExpressRoute, VPN, load balancing, NSGs.
• Knowledge of security controls: Conditional Access, Azure Security Center/Microsoft Defender, Key Vault.
• Experience with backup/DR, monitoring/observability (Azure Monitor, Log Analytics).
• Excellent verbal and written communication; customer-facing and stakeholder management skills.