Principal Enterprise Architect

Clarivate; Philadelphia (Philadelphia County); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Clarivate seeks a Principal Enterprise Architect to lead the Microsoft cloud estate, spanning Azure, Microsoft 365, Entra, and modern endpoints. The role combines hands-on engineering with architectural leadership, directing partners and service owners while steering security, compliance and identity platforms.

The ideal candidate has 12+ years in enterprise architecture, deep Entra and Azure expertise, and a track record of delivering complex tenant designs and governance across global teams.

Qualifications

• 12+ years in enterprise infrastructure, cloud, identity or Microsoft platform architecture.
• 12+ years as a Principal/Lead Architect or senior technical authority in a complex enterprise.
• Deep hands-on Microsoft Entra ID and identity & access management experience.

Responsibilities

• Own the end-to-end Microsoft architecture, standards, baselines and lifecycle plans.
• Define architecture across Entra ID, identity lifecycle, access controls and endpoints.
• Set architecture for Defender, Purview, compliance, audit, and Teams voice.
• Govern Copilot, Power Platform and analytics across apps and data teams.
• Own Azure architecture and landing-zone standards; govern GitHub and DevOps services.
• Act as the highest-level technical escalation point and review designs for operations.

Skills

Microsoft Entra ID

Identity & access mgmt

Azure architecture

Microsoft 365 security

Automation (PowerShell/Azure CLI)

Education

Bachelor's or Master's in CS/Engineering/Info Systems

Tools

GitHub

Visual Studio

PowerShell

Azure CLI

Terraform/Bicep

Job description

We are looking for a Principal Enterprise Architect to join our Enterprise Architecture team. This is an opportunity to serve as the senior technical authority for a Microsoft cloud environment spanning Azure, Microsoft 365, Entra, identity and access management, endpoint management, collaboration, security, compliance and Microsoft developer platforms. This is a hands‑on technical role that provides direction to engineers, security specialists, service owners, implementation partners and managed service providers without traditional people-management responsibility. A successful candidate must be able to design and establish a secure, standalone Microsoft environment while also remaining close enough to the technology to review configurations, resolve complex issues, challenge designs and make definitive technical decisions. We would love to speak with you if you bring deep Microsoft Entra, identity, Microsoft 365 and Azure architecture expertise, including experience designing or separating tenants, cloud environments or enterprise identity platforms.

About You - Experience, Education, Skills, And Accomplishments

• Bachelor's or Master's degree, or equivalent practical experience, in computer science, engineering, information systems or a related technical discipline.
• At least 12 years of experience in enterprise infrastructure, cloud, identity, security or Microsoft platform architecture.
• 12 years of experience as a Principal Architect, Lead Architect or senior technical authority in a complex enterprise environment.
• Deep hands‑on expertise in Microsoft Entra ID, identity and access management, Conditional Access, MFA, privileged identity and application integration.
• Strong technical experience across Microsoft 365, Exchange Online, SharePoint Online, OneDrive and Teams, plus Microsoft Intune, device compliance, application deployment and modern endpoints.

It would be great if you also had . .

• Strong Azure architecture and engineering experience, including landing zones, subscriptions, management groups, RBAC, policy, monitoring and security.
• Practical experience with Microsoft Defender and Microsoft Purview capabilities, with working knowledge of Teams Phone, Power Platform, Copilot, Power BI, Microsoft Fabric, GitHub and Visual Studio.
• Experience designing or separating Microsoft tenants, Azure environments or enterprise identity platforms.
• Demonstrated ability to review detailed configurations, identify technical risks, provide implementable solutions and direct implementation partners through technical authority rather than line management.
• Corporate carve‑out, separation, merger, tenant migration or TSA exit experience, including greenfield Microsoft 365 and Entra tenant implementation.
• Experience with Microsoft 365 E5 security and compliance, Identity Governance, Privileged Identity Management, Identity Protection, workload identity, Microsoft Sentinel or Defender XDR integration.
• Experience with Azure AI services, enterprise Copilot architecture, Power Platform managed environments or Copilot Studio governance.
• Experience with GitHub Enterprise, GitHub Actions, GitHub Advanced Security, Power BI and Microsoft Fabric tenant administration, or enterprise voice and Teams Phone architecture.
• Automation experience using PowerShell, Microsoft Graph, Azure CLI, Bicep, Terraform or equivalent infrastructure-as-code tooling, and relevant Microsoft expert‑level certifications.

What will you be doing in this role?

• Microsoft architecture and roadmap: Own the end‑to‑end technical architecture, engineering standards, configuration baselines, integration patterns and lifecycle plans for the Microsoft ecosystem.
• Identity, Microsoft 365 and endpoints: Define and govern architecture across Entra ID, identity lifecycle, access controls, Exchange Online, SharePoint Online, OneDrive, Teams, Intune, Autopilot and modern device management.
• Security, compliance and collaboration: Set architecture for Defender, Sentinel, Purview, information protection, data loss prevention, retention, audit, eDiscovery, Teams Phone, meetings, conferencing and voice.
• Copilot, Power Platform and analytics: Own technical architecture and governance for Microsoft 365 Copilot, Copilot Studio, Power Apps, Power Automate, Power BI and Microsoft Fabric in partnership with business and data teams.
• Azure and developer platforms: Own Azure architecture and landing‑zone standards and establish governance for GitHub, GitHub Actions, GitHub Copilot, Visual Studio and related developer services.
• Technical assurance and operations: Act as the highest‑level technical escalation point, review designs and configurations, challenge partners and ensure the environment transitions from implementation and hyper‑care into stable operations.

About The Team

The Enterprise Architecture function works across engineering, operations, cybersecurity, data and application teams. This role provides technical direction to engineers, security specialists, service owners, implementation partners and managed service providers, and partners with Cybersecurity, Privacy, Legal, Compliance, Product Technology and the Data and Intelligence function. The role is a senior individual‑contributor position and does not require traditional people management.

Hours of Work

• Full‑time permanent position primarily working core business hours in your time zone, with flexibility to adjust to various global time zones as needed.
• Hybrid position working 2-3 days per week on‑site.
• Must live within a commutable distance of the Philadelphia, PA office.

At Clarivate, we are committed to providing equal employment opportunities for all qualified persons with respect to hiring, compensation, promotion, training, and other terms, conditions, and privileges of employment. We comply with applicable laws and regulations governing non‑discrimination in all locations.