Please mention DailyRemote when applying
See how much of this job your resume covers, and what’s missing.
Want a recruiter to go through it line by line?
Get professional reviewQuestions interviewers often ask for this role, with sample answers.
One click makes a copy of your resume for this role, scores it against the posting, and proposes edits line by line. Your default resume is never changed.
Upload your resume and we draft a letter for this exact role, tailored to what it asks for.
The architect will design the end user compute and Microsoft 365 architecture for carve-outs, including device management, endpoint security, and tenant-to-tenant migrations. They are responsible for producing high-level and low-level designs while defining policies for patching, software deployment, and identity management.
This is a remote position.
Role Summary
Designs the end user compute and Microsoft 365 architecture for a carve-out, covering devices, mailboxes, endpoint security and certificates. Owns the target-state design and the technical approach for moving users and devices between tenants.
Job Responsibilities
Design the target Microsoft 365 and Exchange Online architecture
Design cross-tenant synchronisation and cross-tenant trust
Design mailbox, shared mailbox and user management approaches
Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs
Design device moves between tenants, including compliance and configuration baselines
Define XDR and EDR solution architecture and endpoint protection policies
Design patching and software deployment for managed endpoints
Design ZTNA and VPN client deployment and management
Design PKI, certificate authority delegation and device certificate issuance
Define preventive controls including application locking and MFA enforcement
Produce high-level and low-level designs and review them with client architects
Required Experience
10+ years of relevant experience in end user compute architecture
Strong experience with Microsoft 365 and Exchange Online
Strong experience with Microsoft Intune policies and Windows Autopilot
Experience with device wipe, re-enrolment and tenant-to-tenant device moves
Experience with cross-tenant sync, cross-tenant trust and shared mailboxes
Experience with mailbox migration and user management
Experience with XDR and EDR solutions, such as Microsoft Defender and CrowdStrike
Experience with patching tools and endpoint software management
Experience with ZTNA and VPN client deployment, at least two vendors
Good understanding of PKI: certificate authorities, templates, delegation and device certificates
Experience with preventive controls such as application locking
Experience with MFA design and enforcement
Working knowledge of Entra ID and hybrid identity as it affects endpoints
Experience with at least two cloud providers (Azure and AWS)
Exposure to at least two OEMs or two vendors in each technology area
Strong communication skills, with prior experience working with UK and EU clients
Willingness to travel as required and to work in the client time zone
Prior infrastructure background alongside the specialism above
Prior experience in IT consolidations, mergers, demergers and carve-outs (mandatory)
Relevant professional certifications strongly recommended
Stop the endless job search. Our AI finds and applies to the best jobs for you.
Featuring 215,959+ Jobs in Architect
Answer easy questions
215,959+ jobs across 15+ categories
Get your best job matches
Only hand-screened, legit jobs
Find a remote job faster
No ads, scams, or junk
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
