IT Architect

About the role

The incumbent of the role is expected to design, develop, and maintain enterprise identity and infrastructure management platforms serving distributed IT administrators across global campuses. Serves as technical architect for hybrid and cloud-first identity, authentication, and device lifecycle systems, bridging legacy on-premises infrastructure with modern cloud services. Architects integrations between on-premises Active Directory, Entra ID, and Microsoft Graph API to support centralized administration of identity, access control, and endpoint management at enterprise scale. Translates complex operational requirements into scalable, maintainable tooling and automation. Evaluates cost and implementation timelines for new infrastructure solutions and thoroughly documents changes, architectural decisions, and system functionality. Responds to security incidents affecting infrastructure systems and mitigates vulnerabilities across identity and authentication services.

Responsibilities

Platform Architecture and Development

• Design, develop, and maintain enterprise CLI tooling and automation platforms for identity and infrastructure management operations using C#/.NET and PowerShell.
• Architect and implement integrations with Microsoft Graph API and related cloud service APIs.
• Define and maintain platform architecture including module structure, authentication flows, permission models, and extensibility patterns.
• Manage full software development lifecycle including version control, testing, deployment, and documentation for tools used by distributed IT administrators across multiple campuses.

Identity and Access Management Architecture

• Architect and administer Entra ID tenant infrastructure including device lifecycle management, Conditional Access policies, access packages, and hybrid identity synchronization.
• Design and implement tiered permission models supporting principle of least privilege across distributed administrative teams.
• Plan and execute migration strategies for transitioning on-premises Active Directory services to cloud-native identity solutions while maintaining operational continuity.

Authentication Infrastructure

• Design and maintain enterprise authentication systems including smartcard/PIV enrollment and lifecycle, FIDO2/passkey deployment, and certificate-based authentication.
• Manage PKI trust chains and certificate lifecycle processes for enterprise authentication services.
• Troubleshoot complex multi-layer authentication flows spanning network, certificate, and identity provider components.

Device Lifecycle and Endpoint Management

• Architect and support Autopilot and Intune-based device provisioning and management pipelines.
• Design and implement automated device lifecycle operations including enrollment, compliance monitoring, baseline configuration, and decommissioning at scale.
• Develop and maintain fleet-wide remediation and hygiene automation for endpoint and device object management.

Security and Incident Response

• Evaluate security risks to infrastructure systems including identity, authentication, and endpoint management services, and recommend architectural mitigations.
• Participate in incident response for infrastructure-layer security events.
• Assess vendor and third-party access requests for appropriate scope, delegation model, and compliance with security standards.

Requirements

Bachelor’s degree or 4 years of experience in computing technology or equivalent combination of experience and education. Experience in integration of on-premises