We are looking for a Principal Enterprise Architect to join our Enterprise Architecture team. This is an opportunity to serve as the senior technical authority for a Microsoft cloud environment spanning Azure, Microsoft 365, Entra, identity and access management, endpoint management, collaboration, security,complianceand Microsoft developer platforms. This is a hands-on technical role that provides direction to engineers, security specialists, service owners, implementationpartnersand managed service providers without traditional people-management responsibility. A successful candidate must be able to design and establish a secure, standalone Microsoft environment while also remaining close enough to the technology to review configurations, resolve complex issues, challenge designs and make definitive technical decisions. We would love to speak with you if you bring deep Microsoft Entra, identity, Microsoft365and Azure architectureexpertise, including experience designing or separating tenants, cloudenvironmentsor enterprise identity platforms.
About You - experience, education, skills, and accomplishments
- Bachelor's or Master'sdegree, or equivalent practical experience, in computer science, engineering, information systems or a related technical discipline.
- At least 12 years of experience in enterprise infrastructure, cloud, identity,securityor Microsoft platform architecture.
- 12 years of experienceas a Principal Architect, LeadArchitector senior technical authority in a complex enterprise environment.
- Deep hands-onexpertisein Microsoft Entra ID, identity and access management, Conditional Access, MFA, privilegedidentityand application integration.
- Strong technical experience across Microsoft 365, Exchange Online, SharePoint Online,OneDriveand Teams, plus Microsoft Intune, device compliance, applicationdeploymentand modern endpoints.
It would be great if you also had . . .
- Strong Azure architecture and engineering experience, including landing zones, subscriptions, management groups, RBAC, policy,monitoringand security.
- Practical experience with Microsoft Defender and Microsoft Purview capabilities, with working knowledge of Teams Phone, Power Platform, Copilot, Power BI, Microsoft Fabric,GitHuband Visual Studio.
- Experience designing or separating Microsoft tenants, Azureenvironmentsor enterprise identity platforms.
- Demonstrated ability to review detailed configurations,identifytechnical risks, provide implementablesolutionsand direct implementation partners through technical authority rather than line management.
- Corporate carve-out, separation, merger, tenantmigrationor TSA exit experience, including greenfield Microsoft 365 and Entra tenant implementation.
- Experience with Microsoft 365 E5 security and compliance, Identity Governance, Privileged Identity Management, Identity Protection, workload identity, Microsoft Sentinel or Defender XDR integration.
- Experience with Azure AI services, enterprise Copilot architecture, Power Platform managedenvironmentsor Copilot Studio governance.
- Experience with GitHub Enterprise, GitHub Actions, GitHub Advanced Security, Power BI and Microsoft Fabric tenant administration, or enterprise voice and Teams Phone architecture.
- Automation experience using PowerShell, Microsoft Graph, Azure CLI, Bicep, Terraform or equivalent infrastructure-as-code tooling, and relevant Microsoft expert-level certifications.
What will you be doing in this role?
- Microsoft architecture and roadmap:Own the end-to-end technical architecture, engineering standards, configuration baselines, integrationpatternsand lifecycle plans for the Microsoft ecosystem.
- Identity, Microsoft365and endpoints:Define and govern architecture across Entra ID, identity lifecycle, access controls, Exchange Online, SharePoint Online, OneDrive, Teams, Intune,Autopilotand modern device management.
- Security,complianceand collaboration:Set architecture for Defender, Sentinel, Purview, information protection, data loss prevention, retention, audit, eDiscovery, Teams Phone, meetings,conferencingand voice.
- Copilot, Power Platform and analytics:Own technical architecture and governance for Microsoft 365 Copilot, Copilot Studio, Power Apps, Power Automate, Power BI and Microsoft Fabric in partnership with business and data teams.
- Azure and developer platforms:Own Azure architecture and landing-zone standards andestablishgovernance for GitHub, GitHub Actions, GitHub Copilot, VisualStudioand related developer services.
- Technical assurance and operations:Act as the highest-level technical escalation point, review designs and configurations, challenge partners and ensure the environment transitions from implementation andhypercareinto stable operations.
The Enterprise Architecture function works across engineering, operations, cybersecurity,dataand application teams. This role provides technical direction to engineers, security specialists, service owners, implementation partners and managed service providers, and partners with Cybersecurity, Privacy, Legal, Compliance, Product Technology and the Data and Intelligence function. The role is a senior individual-contributor position and does not require traditional people management.
- Full-time permanent position primarily working core business hours in your time zone, with flexibility to adjust to various global time zones as needed.
- Hybrid position working 2-3 days per week on-site.
- Must live within a commutable distance of the Philadelphia, PA office.
