We are looking for a Principal Enterprise Architect to join our Enterprise Architecture team. This is an opportunity to serve as the senior technical authority for a Microsoft cloud environment spanning Azure, Microsoft 365, Entra, identity and access management, endpoint management, collaboration, security, compliance and Microsoft developer platforms. This is a hands-on technical role that provides direction to engineers, security specialists, service owners, implementation partners and managed service providers without traditional people-management responsibility. A successful candidate must be able to design and establish a secure, standalone Microsoft environment while also remaining close enough to the technology to review configurations, resolve complex issues, challenge designs and make definitive technical decisions. We would love to speak with you if you bring deep Microsoft Entra, identity, Microsoft 365 and Azure architecture expertise, including experience designing or separating tenants, cloud environments or enterprise identity platforms.

About You - experience, education, skills, and accomplishments

• Bachelor's or Master's degree, or equivalent practical experience, in computer science, engineering, information systems or a related technical discipline.
• At least 12 years of experience in enterprise infrastructure, cloud, identity, security or Microsoft platform architecture.
• 12 years of experience as a Principal Architect, Lead Architect or senior technical authority in a complex enterprise environment.
• Deep hands-on expertise in Microsoft Entra ID, identity and access management, Conditional Access, MFA, privileged identity and application integration.
• Strong technical experience across Microsoft 365, Exchange Online, SharePoint Online, OneDrive and Teams, plus Microsoft Intune, device compliance, application deployment and modern endpoints.

It would be great if you also had . . .

• Strong Azure architecture and engineering experience, including landing zones, subscriptions, management groups, RBAC, policy, monitoring and security.
• Practical experience with Microsoft Defender and Microsoft Purview capabilities, with working knowledge of Teams Phone, Power Platform, Copilot, Power BI, Microsoft Fabric, GitHub and Visual Studio.
• Experience designing or separating Microsoft tenants, Azure environments or enterprise identity platforms.
• Demonstrated ability to review detailed configurations, identify technical risks, provide implementable solutions and direct implementation partners through technical authority rather than line management.
• Corporate carve-out, separation, merger, tenant migration or TSA exit experience, including greenfield Microsoft 365 and Entra tenant implementation.
• Experience with Microsoft 365 E5 security and compliance, Identity Governance, Privileged Identity Management, Identity Protection, workload identity, Microsoft Sentinel or Defender XDR integration.
• Experience with Azure AI services, enterprise Copilot architecture, Power Platform managed environments or Copilot Studio governance.
• Experience with GitHub Enterprise, GitHub Actions, GitHub Advanced Security, Power BI and Microsoft Fabric tenant administration, or enterprise voice and Teams Phone architecture.
• Automation experience using PowerShell, Microsoft Graph, Azure CLI, Bicep, Terraform or equivalent infrastructure-as-code tooling, and relevant Microsoft expert-level certifications.

What will you be doing in this role?

• Microsoft architecture and roadmap: Own the end-to-end technical architecture, engineering standards, configuration baselines, integration patterns and lifecycle plans for the Microsoft ecosystem.

• Identity, Microsoft 365 and endpoints: Define and govern architecture across Entra ID, identity lifecycle, access controls, Exchange Online, SharePoint Online, OneDrive, Teams, Intune, Autopilot and modern device management.

• Security, compliance and collaboration: Set architecture for Defender, Sentinel, Purview, information protection, data loss prevention, retention, audit, eDiscovery, Teams Phone, meetings, conferencing and voice.

• Copilot, Power Platform and analytics: Own technical architecture and governance for Microsoft 365 Copilot, Copilot Studio, Power Apps, Power Automate, Power BI and Microsoft Fabric in partnership with business and data teams.

• Azure and developer platforms: Own Azure architecture and landing-zone standards and establish governance for GitHub, GitHub Actions, GitHub Copilot, Visual Studio and related developer services.

• Technical assurance and operations: Act as the highest-level technical escalation point, review designs and configurations, challenge partners and ensure the environment transitions from implementation and hypercare into stable operations.

About the Team

The Enterprise Architecture function works across engineering, operations, cybersecurity, data and application teams. This role provides technical direction to engineers, security specialists, service owners, implementation partners and managed service providers, and partners with Cybersecurity, Privacy, Legal, Compliance, Product Technology and the Data and Intelligence function. The role is a senior individual-contributor position and does not require traditional people management.

Hours of Work

• Full-time permanent position primarily working core business hours in your time zone, with flexibility to adjust to various global time zones as needed.

• Hybrid position working 2-3 days per week on-site.

• Must live within a commutable distance of the Philadelphia, PA office.