Agility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.
This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1–2 administrators. There is no higher technical authority within the function; you will own critical decisions end-to-end.
The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online/Hybrid, Microsoft Teams and SBC voice, SharePoint/OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude + Microsoft Copilot), and a large SSO/application integration portfolio.
Your Responsibilities
Identity & Access Management
•
Administer Microsoft Entra ID and on-premises AD across all environments
•
Design and maintain Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC, SAML)
•
Own hybrid identity via Entra Connect
Messaging & Email
•
Administer Exchange Online and Exchange Server (hybrid), including DAG, mail flow, and transport rules
•
Own email security (gateway, DMARC, DKIM, SPF) and manage mailbox migrations
Collaboration & Voice
•
Administer Microsoft Teams policies, governance, and SBC-based enterprise voice (dial plans, call queues, PSTN)
•
Manage SharePoint Online and OneDrive, including external sharing and Known Folder Move
Security & Threat Protection
•
Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR, security baselines)
•
Lead incident response and maintain hardening controls aligned to CIS benchmarks
Endpoint Management (Intune)
•
Manage a mid-to-large multi-country fleet (Windows, macOS, Android, iOS)
•
Own Autopilot, compliance/configuration policies, update rings, app packaging, and PowerShell remediation scripts
Certificates, DNS & Web Publishing
•
Manage full SSL/TLS certificate lifecycle and DNS/CDN/WAF/DDoS platforms
•
Own domain governance, registrations, and the web publishing approval workflow
Artificial Intelligence
•
Administer enterprise AI platforms including Claude integrations and Microsoft Copilot
•
Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing
Architecture, Governance & Leadership
•
Act as technical design authority; maintain standards, runbooks, and documentation
•
Lead, mentor, and delegate to a small admin team
•
Serve as final escalation point; on-call for critical incidents
Requirements
Your Qualifications
Education
•
Bachelor’s degree in Computer Science, IT, Engineering, or related field (Master’s preferred)
•
Exceptional hands-on experience may be considered in lieu of formal qualifications
Experience
•
12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise
•
5–7 years in a senior architect or technical lead role owning M365 environments end-to-end
•
Proven hands-on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender
•
Practical experience with enterprise AI platforms (Claude, Microsoft Copilot), including workflow design and data modeling
Certifications (Required/Strongly Preferred — candidates should hold several)
•
MS-102 — Microsoft 365 Enterprise Administrator Expert
•
SC-300 — Identity and Access Administrator Associate