Cloud Architect, Modern Work

TrustedTech; Greater London; Hybrid; GBP 110,000 - 170,000; Full time

Benefits offered by this job

Extra 4 Days of Annual Leave After 1

Pension Scheme

Monthly Company Events

Monthly Team Lunches

Training and Certification support

Job summary

TrustedTech in London is seeking an experienced Cloud Architect, Modern Work, to design and implement Microsoft 365 Modern Workplace cloud and hybrid solutions for mid-market and enterprise clients.

You will lead migrations, governance, security, and automation using Intune, Entra ID, Defender, Copilot, and Teams Voice, with a strong focus on client engagement and delivery excellence in a hybrid setup.

Qualifications

• 5+ years designing and supporting cloud-based Microsoft solutions.
• Experience migrating Google Workspace to Microsoft 365.
• Strong knowledge of Microsoft 365 configuration, administration, and tenant management.
• Experience designing and managing Intune and mobile device management.
• Proficiency with Entra ID and SSO integration.
• Knowledge of security and compliance in the Microsoft ecosystem, including UK GDPR considerations.
• Endpoint deployment in hybrid and cloud-native environments.
• Scripting and automation using PowerShell; Python is a plus.

Responsibilities

• Mailbox, Identity & Tenant Migrations guidance and planning.
• Assess client environments and design solution roadmaps.
• Design Intune architectures and zero-touch provisioning for hybrid identities.
• Define security standards with Conditional Access and compliance tooling.
• Lead Teams Voice migrations and telephony configurations.
• Support hybrid voice deployments with SBCs and SIP trunking.
• Deploy Defender suites across endpoints and cloud services.
• Govern data with Purview, DLP, and UK GDPR alignment.
• Apply Power Automate, Power BI, and Purview for automation and analytics.
• Advise on Copilot adoption and governance controls.

Skills

Microsoft 365

Intune

Entra ID

Conditional Access

PowerShell

Python

Cloud architecture

Migration

Client-facing

Hybrid work

Tools

PowerShell

Python

Job description

TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Our robust team of in-house, global Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.

Prioritizing a people-centric mission, TrustedTech has transformed the Microsoft software licensing experience, giving IT professionals complete confidence in the success of their Microsoft investment.

TrustedTech is the fastest-growing Microsoft Partner globally, with a presence in the UK and Europe for just over four years. Our continued success is built on relentless customer focus, innovation, and a world-class team. You’ll be joining a high-energy, high-impact organisation with the opportunity to make the role your own and directly influence our growth across the region.

Overview:

We are seeking an experienced Cloud Architect, Modern Work with a strong background in implementing, consulting on, and supporting Microsoft 365 Modern Workplace cloud and hybrid solutions, to join our UK team. Core areas include Intune, Microsoft 365 identity and mailbox migrations, Microsoft Teams Voice, Microsoft Defender, and Copilot. As part of our Professional Services team, this role partners with clients to design and implement cloud-based solutions that align with business requirements, assess existing IT environments, and identify opportunities to modernise workloads using Microsoft technologies.

Responsibilities:

• Mailbox, Identity & Tenant Migrations: Provide expert-level guidance on mailbox, identity, and tenant migrations, including the configuration of Microsoft enterprise cloud solutions such as Active Directory, Exchange, OneDrive, SharePoint, Teams, Entra ID, and Entra Connect.
• Environment Assessment & Roadmapping: Analyse clients’ current environments, define desired outcomes, and design solution roadmaps that improve user experience, support adoption of emerging technologies, enable automation, and enhance operational processes.
• Intune & Endpoint Architecture: Design and modernise Microsoft Intune environments by implementing Mobile Application Management (MAM), application protection policies, and Windows Autopilot to support secure, zero-touch device provisioning and hybrid identity scenarios.
• Security & Device Standards: Define and enforce device management and security standards using Conditional Access, compliance policies, security baselines, and MDM profiles to support secure onboarding, BYOD management, and full device lifecycle management across iOS, Android, and Windows platforms.
• Teams Voice & Enterprise Telephony: Lead Microsoft Teams Voice migrations by assessing existing telephony environments, designing call flow architectures, and configuring Phone System features such as auto attendants, call queues, and number porting using Calling Plans, Direct Routing, and Operator Connect.
• Hybrid Voice Deployments: Support hybrid voice deployments by integrating certified SBCs and SIP trunking, optimising network quality and security, and guiding migration execution, user enablement, and post-migration stabilisation.
• Microsoft Defender Suite Deployment: Design and implement Microsoft Defender solutions across endpoints and cloud services, including Defender for Endpoint, Office 365, Identity, and Cloud Apps, to strengthen security posture through policy configuration, attack surface reduction, and automated response.
• Data Governance & UK/EU Compliance: Lead data governance and compliance initiatives by designing and deploying sensitivity labels, DLP policies, and Purview compliance solutions, while applying Conditional Access, privileged access management, and activity monitoring to protect sensitive data in alignment with UK GDPR and relevant data privacy laws.
• Automation & Analytics: Maintain strong working knowledge of Microsoft Power Automate, Power BI, and Microsoft Purview, applying these platforms to support automation, analytics, governance, and informed architectural decision‑making.
• Microsoft Copilot Enablement: Support the adoption of Microsoft Copilot by advising on integration with Microsoft 365 services, defining data access and governance controls, and guiding user readiness to ensure secure and effective use.

Required Skills & Qualifications (must-haves):

• 5+ years of experience designing, implementing, and supporting cloud-based solutions, with a strong focus on Microsoft cloud technologies.
• Hands‑on experience migrating collaboration platforms from Google Workspace to Microsoft 365.
• Strong working knowledge of Microsoft 365 configuration, administration, and tenant management.
• Experience designing and managing Microsoft Intune and mobile device management solutions across iOS and Android platforms.
• Solid understanding of identity and access management, including single sign‑on (SSO) integration using Entra ID.
• Experience configuring and managing Conditional Access policies to support secure identity and device access.
• Working knowledge of security and compliance capabilities within the Microsoft ecosystem, including data protection, governance features, and UK GDPR/data privacy laws.
• Experience with endpoint deployment and management solutions in hybrid and cloud‑native environments.
• Proficiency with scripting and automation using tools such as PowerShell; experience with additional languages (e.g., Python) is a plus.
• Strong analytical, problem‑solving, and cross‑functional collaboration capabilities.
• Clear written and verbal communication skills, with the ability to explain complex technical concepts to non‑technical business stakeholders.

Preferred Skills & Qualifications (nice‑to‑haves):

• Microsoft certifications such as Azure Solutions Architect Expert, Microsoft 365 Enterprise Administrator Expert, or comparable cloud certifications.
• Recognized IT/project management framework qualifications (e.g., ITIL, PRINCE2, or APM).
• Demonstrated ability to communicate technical concepts clearly and effectively to non‑technical stakeholders.
• Experience leading technical discussions and providing guidance to peers on best practices and solution approaches.
• Prior experience in a technical consulting, Professional Services, or Managed Services Provider (MSP) environment.

Type: Hybrid role (3 days onsite, 2 days WFH)

Location: 3 New St Square, London EC4A 3BF

Hours: 8:30 am to 5:30 pm

Out-of-Hours Work: Occasional evening or weekend work may be required for production cutovers and migration events, with advance notice.

• Extra 4 Days of Annual Leave After 1 Year
• Pension Scheme
• Monthly Company Events
• Monthly Team Lunches
• Ongoing training, certification support, and career development opportunities in a rapidly growing Microsoft Partner environment.

*TrustedTech is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation/gender identity, or any other characteristic protected by applicable law.*