Lead Technology Architect

About the role

Agility is seeking a Lead Technology Architect to act as the senior technical authority for its messaging, collaboration, and identity platforms. This hands‑on leadership position involves designing, building, securing, and operating a broad Microsoft‑centric estate while establishing standards and guiding a small admin team.

Key responsibilities

• Administer Microsoft Entra ID and on‑premises Active Directory, including Conditional Access, PIM, RBAC, MFA and SSO protocols (OAuth, OIDC, SAML).
• Design, deploy and manage Exchange Online/Server hybrid environments, mail flow, transport rules and email security (DMARC, DKIM, SPF).
• Configure Microsoft Teams policies, governance and SBC‑based enterprise voice, including dial plans and PSTN integration.
• Manage SharePoint Online, OneDrive and external sharing, ensuring data protection with Known Folder Move.
• Operate Microsoft Defender for Office 365 and Endpoint, lead incident response and enforce CIS benchmark hardening.
• Oversee Intune for a multi‑country device fleet (Windows, macOS, Android, iOS), including Autopilot, compliance policies and PowerShell remediation.
• Handle SSL/TLS certificate lifecycle, DNS, CDN, WAF and DDoS platforms, and manage domain governance.
• Administer enterprise AI platforms such as Claude and Microsoft Copilot, design AI workflows and manage licensing.
• Maintain technical documentation, runbooks and serve as the final escalation point for critical incidents.

Required profile

• Bachelor’s degree in Computer Science, IT, Engineering or related field (Master’s preferred).
• 12‑15 years of enterprise IT infrastructure experience with deep Microsoft stack expertise.
• 5‑7 years in a senior architect or technical lead role overseeing M365 environments end‑to‑end.
• Proven hands‑on experience with Exchange hybrid, Entra ID/AD, Intune at scale and Microsoft Defender.

Required skills

• Microsoft Entra ID
• Active Directory
• Exchange Online and Exchange Server (hybrid)
• Microsoft Teams
• Session Border Controller (SBC) voice
• SharePoint Online
• OneDrive
• Microsoft Defender for Office 365
• Microsoft Defender for Endpoint
• Intune
• Windows, macOS, Android, iOS
• Autopilot
• PowerShell
• SSL/TLS certificates
• DNS
• CDN
• Web Application Firewall (WAF)
• DDoS protection
• Claude (AI platform)
• Microsoft Copilot
• OAuth, OpenID Connect (OIDC), SAML
• Conditional Access
• Privileged Identity Management (PIM)
• Role‑Based Access Control (RBAC)
• Multi‑Factor Authentication (MFA)