Lead Technology Architect

About the role

Agility is seeking a Lead Technology Architect to serve as the senior technical authority for its messaging, collaboration, and identity ecosystem. This hands‑on leadership position involves designing, building, securing, and operating a broad Microsoft‑centric platform while establishing standards and guiding a small admin team.

Key responsibilities

• Administer Microsoft Entra ID and on‑prem AD, design Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC, SAML).
• Manage Exchange Online/Server hybrid environment, including DAG, mail flow, transport rules, and email security (DMARC, DKIM, SPF).
• Configure Microsoft Teams policies, governance, and SBC‑based enterprise voice (dial plans, call queues, PSTN).
• Oversee SharePoint Online, OneDrive, external sharing, and Known Folder Move.
• Operate Microsoft Defender for Office 365 and Endpoint, lead incident response, and maintain CIS‑aligned hardening.
• Run Intune for a multi‑country fleet, handling Autopilot, compliance policies, update rings, app packaging, and PowerShell remediation.
• Manage SSL/TLS certificate lifecycle, DNS, CDN, WAF, DDoS platforms, and domain governance.
• Administer enterprise AI platforms (Claude, Microsoft Copilot), design AI workflows, govern access, and manage licensing.
• Act as technical design authority, maintain runbooks, mentor administrators, and serve as final escalation point.

Required profile

• Bachelor’s degree in Computer Science, IT, Engineering or related field (Master’s preferred).
• 12‑15 years of enterprise IT infrastructure experience with deep Microsoft stack expertise.
• 5‑7 years in a senior architect or technical lead role owning M365 environments end‑to‑end.
• Proven hands‑on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender.

Required skills

• Microsoft Entra ID, Active Directory
• Exchange Online, Exchange Server (hybrid)
• Microsoft Teams, SBC voice
• SharePoint Online, OneDrive
• Microsoft Defender for Office 365, Defender Endpoint
• Intune, Autopilot, PowerShell
• SSL/TLS certificates, DNS, CDN, WAF, DDoS protection
• Conditional Access, Privileged Identity Management, RBAC, MFA, SSO (OAuth, OIDC, SAML)
• Claude, Microsoft Copilot AI platforms