Microsoft Cloud Architect & Automation Specialist

Abnormal Security Corp.; United States; Remote; USD 131,000 - 155,000; Full time

Job summary

A leading cybersecurity company is seeking a technical leader for the migration from Google Workspace to Microsoft 365. This full-time remote position emphasizes automation and strategic planning, aiming to create a sustainable, secure environment. Candidates should have proven migration experience and an aptitude for improving operational efficiency through technology.

Benefits

Flexible PTO

Generous healthcare coverage

Competitive compensation

Qualifications

• Proven experience in migrating from Google Workspace to Microsoft 365.
• In-depth knowledge of M365 configuration and administration.
• Expertise in Microsoft Intune and mobile device management.

Responsibilities

• Lead the migration project from Google Workspace to Microsoft 365.
• Develop strategic roadmaps for Microsoft environment management.
• Configure and manage security and compliance measures.

Skills

API-based solutions

Automation

Technical Strategy

Collaborative Stakeholder Engagement

Education

Bachelor's Degree in Computer Science or related field

Tools

Microsoft 365

Microsoft Intune

Job description

Remote - USA

Full-time

About the Role

This role starts with leading the Google Workspace to Microsoft 365 migration project but transitions into long-term management of the Microsoft environment with opportunities to expand responsibility to other platforms. The ideal candidate will combine deep technical expertise with strategic thinking and automation skills to build scalable, efficient solutions. You'll have the opportunity to shape the technical direction of our environment while implementing innovative automation approaches that reduce manual effort and improve reliability.

We're looking for someone who can think beyond the immediate migration project to create a sustainable, automated environment that grows with our organization. Your ability to develop API-based solutions and automate complex processes will be crucial to success in this role.

What you will do

Technical Leadership & Strategy

• Serve as the primary Microsoft technical expert and decision-maker for the migration project
• Develop strategic roadmaps for both migration and long-term Microsoft environment management
• Evaluate and recommend technical solutions that align with business objectives
• Collaborate with stakeholders to establish technical requirements and success criteria
• Provide technical guidance and mentorship to team members

Google Workspace to Microsoft 365 Migration

• Lead the migration of approximately 500 mailboxes (~2.5TB of data) from Google Workspace to M365
• Configure the migration environment according to organizational requirements
• Recommend and implement appropriate migration tools and methodologies
• Conduct test and pilot migrations with diverse use cases
• Provide post-migration support for test, pilot, and production users
• Validate migrated mailboxes for availability, mail flow, and access

Microsoft Intune Configuration and Management

• Review existing Intune cloud services in the legacy M365 tenant
• Design and implement Mobile Application Management (MAM) and application protection policies
• Configure MDM Profiles for Mobile Devices
• Implement governance policies and conditional access policies for BYOD iOS and Android devices

Environment Preparation and Configuration

• Assist with licensing and license assignment automation
• Implement security baselines and configure security groups
• Design and configure the email environment including:
• Mailbox design and configuration
• Policy and structure design
• Mail flow, connectors, transport rules, SPF/DKIM/DMARC knowledge is a plus
• Shared and resource mailbox configuration
• Configure conditional access for compliant devices
• Implement endpoint security and encryption measures
• Ensure security policy alignment with legacy M365 tenant
• Configure and test imageless endpoint deployment including:
• Endpoint compliance and conditional access policies
• Remediation scripts
• PatchMyPC integration
• Entra/Windows365 solutions for cloud PC needs
• Autopatch Management
• Migrate existing endpoints to the new environment

Security and Compliance

• Configure Microsoft Purview for DLP, Information Protection, and compliance
• Implement Microsoft Defender for M365 and Defender for Endpoint
• Configure Secure Score, Attack Simulation, and Safe Links/Attachments

Automation and Process Improvement

• Build API-based solutions to automate migration processes and ongoing management tasks
• Develop custom scripts and tools to enhance operational efficiency
• Create self-service options for common user requests to reduce IT workload
• Implement monitoring and alerting systems with automated remediation
• Establish automated testing and validation processes for configurations and updates
• Develop scalable architecture for ongoing Microsoft environment management
• Create automation roadmaps for continuous improvement of the environment
• Establish governance frameworks and best practices for system administration
• Build reporting and analytics capabilities to track system health and performance
• Plan for future expansion to manage additional platforms beyond Microsoft
• Maintain security posture through automated scanning and remediation

Knowledge Transfer and Documentation

• Document common administrative and operational maintenance tasks
• Create documentation for custom automation solutions and APIs
• Develop runbooks for automated and manual processes
• Offer guidance on best practices for ongoing environment management

Must Haves

• Proven experience in migrating from Google Workspace to Microsoft 365
• In-depth knowledge of M365 configuration and administration
• Expertise in Microsoft Intune and mobile device management (iOS and Android)
• Strong understanding of identity management, including SSO integration with Okta
• Proficiency in configuring and managing conditional access policies
• Knowledge of security and compliance solutions within the Microsoft ecosystem
• Experience with endpoint management and deployment solutions
• Experience developing and implementing API-based automation solutions
• Background in creating self-service and automated workflows for routine tasks
• Ability to design and implement infrastructure-as-code solutions
• Demonstrated ability to translate business requirements into technical solutions

Nice to Haves

• Google Workspace administration knowledge
• Familiarity with Splunk integration
• Experience with cloud-based APIs and webhooks
• Experience leveraging M.io for free/busy coexistence
• Knowledge of containerization and orchestration (Docker, Kubernetes)
• Experience with infrastructure-as-code tools (Terraform, ARM templates, etc.)
• Background in developing custom connectors and integrations between systems
• Experience with monitoring and analytics including:
• M365 Admin Center reports
• Azure AD Sign-in logs and activity logs
• Defender and Compliance dashboards
• Usage analytics (Power BI, Viva Insights)
• Experience in providing client-facing consulting services
• Background in developing self-service portals and automation frameworks

Work Location and Schedule

• Ability to work during US Pacific Standard Time (PST) hours is required
• Remote position with occasional client meetings as needed

#LI-RT1

At Abnormal AI, certain roles are eligible for a bonus, restricted stock units (RSUs), and benefits. Individual compensation packages are based on factors unique to each candidate, including their skills, experience, qualifications and other job-related reasons. We know that benefits are also an important piece of your total compensation package. Learn more about our Compensation and Equity Philosophy on our Benefits & Perks page.

Base salary range:

$131,800 — $155,000 USD

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here . If you would like more information on your EEO rights under the law, please click here .

As part of Abnormal AI's secure hiring practices, we conduct video interviews and validate applicant identity at various stages through our recruitment process. Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI's policies relevant to our security and privacy standards.Abnormal AI is committed to protecting your privacy. Please review our Abnormal AI Applicant Privacy Policy for full information about how Abnormal AI uses your personal information. By submitting an application you confirm that you have read and understand the Abnormal AI Applicant Privacy Policy .

About Abnormal AI

We're one of the world's fastest growing cybersecurity companies, on a mission to protect the modern workplace from the most pressing threats. Our AI-native technology was built from the ground up to tackle forward-looking security challenges, and our team works with bleeding-edge technology to keep our customers and their people safe as attacks grow ever more sophisticated.Our team is what makes us successful, which is why we're committed to a culture of learning, ownership, and high performance, where you'll have the opportunity to accelerate your growth and unlock excellence with the support of talented colleagues.

Taking care of our team goes beyond the office. Our compensation and benefits philosophy is designed to put attract, motivate, and retain top talent: Competitive Compensation We pay competitively to attract, reward, and retain top talent in the market

Equity is an important part of our total comp strategy

When the company does well, we all do well. Equity is an important and exciting part of our total compensation strategy as a pre-IPO startup. We’re guided by the belief our team members should share in the financial success of our company and grant equity accordingly.

Flexible PTO

All regular salaried team members enjoy flexible PTO. We want team members to grow with us, and a big part of that is making sure our team has the opportunity to rest and recharge. We also observe 12 paid holidays every year.

Generous Healthcare Coverage for You and Your Family

Taking care of our team goes beyond the office. In the US, we cover 100% of employee health care premium costs, and up to 100% for dependents, depending on the plan. Internationally, we offer similarly generous coverage, customized to each country in which we operate.

Fully Distributed Workforce

Operating as a globally-distributed, majority remote company means we get to work with talented folks, no matter where they live. We prioritize a balance of deep focus time with Zoom meetings, and regular in-person events.As a fast growing startup, we continuously review, improve, and personalize our benefits offerings based on the team’s input. Don’t see something that’s important to you? Let us know!

Our Interview Process

We value transparency at Abnormal, and our interview process is no exception.

Inclusion Matters

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here . If you would like more information on your EEO rights under the law, please click here .

Privacy Policy

Learn more about Abnormal's Privacy Policy here .

We have been made aware that there are potential scammers posing as Abnormal AI recruiters. Please ensure that any communication you have with our recruitment team comes from an official Abnormal email domain. Your safety and privacy are important to us, and we will never request sensitive personal information outside of our secure application process. Thank you for helping us maintain a secure and trustworthy application experience. Should you encounter what you believe to be a scamming attempt at any time in your recruiting process, please let us know at [e-mail]