Lead Technology Architect

Agility Logistics; Kuwait City; On-site; KWD 45,000 - 60,000; Full time

Job summary

Agility Logistics in Kuwait City is seeking a Lead Technology Architect to serve as the senior-most technical authority overseeing Microsoft environments such as Entra ID, Exchange Hybrid, Teams, and more. This role requires extensive experience in enterprise IT infrastructure.

The candidate should possess strong leadership skills to guide a small team in managing and securing critical identity and messaging platforms. A Bachelor's degree in a related field and various Microsoft certifications are prerequisites.

Qualifications

• 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise.
• 5–7 years in a senior architect or technical lead role.
• Proven hands-on experience with Exchange hybrid and Entra ID/AD.

Responsibilities

• Administer Microsoft Entra ID and on-premises AD across all environments.
• Design Conditional Access, RBAC, MFA, and SSO.
• Own hybrid identity via Entra Connect.

Skills

Microsoft Entra ID Administration

Exchange Online Hybrid Management

Microsoft Teams Policies Management

Security Operations

Endpoint Management

Artificial Intelligence Workflow Design

Problem-solving Skills

Stakeholder Management

Education

Bachelor's degree in Computer Science, IT, Engineering, or related field

Tools

Microsoft Defender

Intune

PowerShell

Claude Integrations

Microsoft Copilot

Job description

Job Summary

Agility is looking for a Lead Technology Architect to serve as the senior‑most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments. This hands‑on leadership role requires you to personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of one to two administrators. You will own critical decisions end‑to‑end with no higher technical authority within the function. The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online Hybrid, Microsoft Teams and SBC voice, SharePoint, OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude, Microsoft Copilot), and a large SSO application integration portfolio.

Key Responsibilities

Identity & Access Management

• Administer Microsoft Entra ID and on‑premises AD across all environments.
• Design and maintain Conditional Access, PIM, RBAC, MFA and SSO (OAuth, OIDC, SAML).
• Own hybrid identity via Entra Connect.

Messaging & Email

• Administer Exchange Online and Exchange Server hybrid, including DAG, mail flow, and transport rules.
• Own email security gateway, DMARC, DKIM, SPF, and manage mailbox migrations.

Collaboration & Voice

• Administer Microsoft Teams policies, governance, and SBC‑based enterprise voice dial plans.
• Manage call queues, PSTN, SharePoint Online, and OneDrive, including external sharing and Known Folder Move.

Security & Threat Protection

• Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR) and establish security baselines.
• Lead incident response and maintain hardening controls aligned to CIS benchmarks.

Endpoint Management

• Manage a mid‑to‑large multi‑country fleet of Windows, macOS, Android, and iOS devices.
• Own Autopilot compliance configuration policies, update rings, app packaging, and PowerShell remediation scripts.

Certificates & DNS

• Manage full SSL/TLS certificate lifecycle and DNS (CDN, WAF, DDoS) platforms.
• Own domain governance, registrations, and the web publishing approval workflow.

Artificial Intelligence

• Administer enterprise AI platforms including Claude integrations and Microsoft Copilot.
• Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing.

Architecture, Governance & Leadership

• Act as technical design authority, maintain standards, runbooks, and documentation.
• Lead, mentor, and delegate to a small admin team.
• Serve as final escalation point and on‑call for critical incidents.

Qualifications

Education

• Bachelor's degree in Computer Science, IT, Engineering, or related field (Master's preferred). Exceptional hands‑on experience may be considered in lieu of formal qualifications.

Experience

• 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise.
• 5–7 years in a senior architect or technical lead role owning M365 environments end‑to‑end.
• Proven hands‑on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender.
• Practical experience with enterprise AI platforms (Claude, Microsoft Copilot) including workflow design and data modeling.

Certifications (Required or Strongly Preferred)

• MS‑102 – Microsoft 365 Enterprise Administrator Expert
• SC‑300 – Identity and Access Administrator Associate
• SC‑200 – Security Operations Analyst Associate
• MD‑102 – Endpoint Administrator Associate
• MS‑700 – Teams Administrator Associate
• AZ‑104 – Azure Administrator Associate
• MS‑203 – Messaging Administrator Associate (or equivalent)

Other Requirements

• Based in Kuwait or willing to relocate; on‑site at Kuwait Head Office.
• Eligible to hold Global Administrator / privileged access (enhanced background screening may apply).
• Fluent professional English; Arabic is an advantage.
• On‑call availability for critical incidents.

Proficiencies

• Excellent problem‑solving skills and attention to detail.
• Effective communication and collaboration skills.
• Ability to work independently and handle multiple tasks.
• Analytical and troubleshooting skills.
• Stakeholder management, technical leadership & collaborative influence, operational excellence & adaptive delivery, strategic problem‑solving & architecture design.
• Fluent professional English; Arabic is an advantage.