Lead Technology Architect

Agility; al-Dschahra; On-site; KWD 24,000 - 42,000; Full time

Job summary

Agility is seeking a Lead Technology Architect to be the senior technical authority for our messaging, collaboration, and identity estate across environments. This is a hands-on leadership role. You will design, build, secure, and operate our platforms while setting standards and leading a small team of 1-2 admins.

You will own critical decisions end-to-end and work from Kuwait Head Office. You'll oversee a portfolio including Entra ID, AD, Exchange Hybrid, Teams, Defender, Intune, certificates,

Qualifications

• Bachelor's degree in computer science, IT, engineering, or related field; Masters preferred.
• Exceptional hands-on experience may be considered in lieu of formal qualifications.

Responsibilities

• Design, build, secure, and operate our platforms while setting technical standards and leading a small admin team.
• Administer and strategize across Microsoft Entra ID, AD, Exchange Online/Hybrid, Teams, Defender, Intune, and AI platforms.
• Own architecture decisions end-to-end and act as final escalation point for incidents.

Skills

Leadership

Architecture design

Cloud & security

Identity & access management

Stakeholder management

Technical leadership

Strategic problem-solving

English proficiency

Education

Bachelor's degree in Computer Science / IT / Engineering

Master's preferred

Tools

Microsoft Entra ID

Active Directory

Exchange Online / Hybrid

Microsoft Teams

SharePoint / OneDrive

Microsoft Defender

Intune

AI platforms (Claude, Copilot)

Job description

Agility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.

This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1-2 administrators. There is no higher technical authority within the function; you will own critical decisions end-to-end.

The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online/Hybrid, Microsoft Teams and SBC voice, SharePoint/OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude + Microsoft Copilot), and a large SSO/application integration portfolio.

Your Responsibilities

Identity & Access Management

• Administer Microsoft Entra ID and on-premises AD across all environments
• Design and maintain Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC, SAML)
• Own hybrid identity via Entra Connect

Messaging & Email

• Administer Exchange Online and Exchange Server (hybrid), including DAG, mail flow, and transport rules
• Own email security (gateway, DMARC, DKIM, SPF) and manage mailbox migrations

Collaboration & Voice

• Administer Microsoft Teams policies, governance, and SBC-based enterprise voice (dial plans, call queues, PSTN)
• Manage SharePoint Online and OneDrive, including external sharing and Known Folder Move

Security & Threat Protection

• Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR, security baselines)
• Lead incident response and maintain hardening controls aligned to CIS benchmarks

Endpoint Management (Intune)

• Manage a mid-to-large multi-country fleet (Windows, macOS, Android, iOS)
• Own Autopilot, compliance/configuration policies, update rings, app packaging, and PowerShell remediation scripts

Certificates, DNS & Web Publishing

• Manage full SSL/TLS certificate lifecycle and DNS/CDN/WAF/DDoS platforms
• Own domain governance, registrations, and the web publishing approval workflow

Artificial Intelligence

• Administer enterprise AI platforms including Claude integrations and Microsoft Copilot
• Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing

Architecture, Governance & Leadership

• Act as technical design authority; maintain standards, runbooks, and documentation
• Lead, mentor, and delegate to a small admin team
• Serve as final escalation point; on-call for critical incidents

Requirements

Education

• Bachelor's degree in Computer Science, IT, Engineering, or related field (Master's preferred)
• Exceptional hands-on experience may be considered in lieu of formal qualifications

Experience

• 12-15 years in enterprise IT infrastructure with deep Microsoft stack expertise
• 5-7 years in a senior architect or technical lead role owning M365 environments end-to-end
• Proven hands-on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender
• Practical experience with enterprise AI platforms (Claude, Microsoft Copilot), including workflow design and data modeling

Certifications (Required/Strongly Preferred — candidates should hold several)

• MS-102 — Microsoft 365 Enterprise Administrator Expert
• SC-300 — Identity and Access Administrator Associate
• SC-200 — Security Operations Analyst Associate
• MD-102 — Endpoint Administrator Associate
• MS-700 — Teams Administrator Associate
• AZ-104 — Azure Administrator Associate
• MS-203 — Messaging Administrator Associate (or equivalent)

Other Requirements

• Based in Kuwait or willing to relocate; on-site at Kuwait Head Office
• Eligible to hold Global Administrator / privileged access (enhanced background screening may apply)
• Fluent professional English; Arabic is an advantage
• On-call availability for critical incidents

Your Proficiencies

• Excellent problem-solving skills and attention to detail
• Effective communication and collaboration skills
• Ability to work independently and handle multiple tasks
• Analytical and troubleshooting skills
• Stakeholder Management
• Technical Leadership & Collaborative Influence
• Operational Excellence & Adaptive Delivery
• Strategic Problem-Solving & Architecture Design
• Fluent professional English; Arabic is an advantage