Senior Cloud Architect, Modern Work

TrustedTech; United States; On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

401(k) match

Paid vacation, sick leave, holidays

Parental leave

Voluntary benefits

EAP

Disability (outside CA)

Job summary

TrustedTech is seeking a Senior Cloud Architect, Modern Work, to lead Microsoft 365 Modern Workplace cloud and hybrid solutions across Intune, identity migrations, Teams Voice, Defender, and Purview.

You will work with clients to design roadmaps, modernize workloads, and ensure secure, scalable deployments while collaborating with cross-functional teams in a fast-paced environment.

Qualifications

• 8+ years designing, implementing, and supporting cloud-based solutions focused on Microsoft cloud technologies.
• Hands-on experience migrating from Google Workspace to Microsoft 365.
• Strong Windows/M365 configuration, admin, and tenant management.
• Experience in Intune and mobile device management across iOS/Android.
• IAM expertise with Entra ID and SSO integration.
• Conditional Access policy design and management.
• Security/compliance features in Microsoft ecosystem.
• Endpoint deployment and management in hybrid/cloud environments.
• Scripting with PowerShell; Python is a plus.
• Cloud security, data privacy, and regulatory compliance knowledge.
• Collaboration with developers, engineers, and project managers.
• Clear written and verbal communication.

Responsibilities

• Provide expert guidance on mailbox, identity, and tenant migrations including Entra ID, AD, Exchange, OneDrive, SharePoint, Teams.
• Analyze environments and design roadmaps to modernize workloads with Microsoft technologies.
• Design and modernize Intune environments for secure, zero-touch provisioning and hybrid identity scenarios.
• Enforce device management and security standards with CA, compliance policies, and MDM across platforms.
• Lead Teams Voice migrations, configure Phone System features like auto attendants and call queues.
• Support hybrid voice by integrating SBCs and SIP trunking; guide migration and post-migration stabilization.
• Design and implement Defender solutions across endpoints and cloud services.
• Lead data governance with sensitivity labels, DLP policies, and Purview compliance.
• Apply Power Automate, Power BI, and Purview for automation, governance, and analytics.
• Advise on Copilot integration and governance within Microsoft 365 services.

Skills

8+ years experience

Google Workspace to Microsoft 365

Microsoft 365 administration

Intune/MDM

Entra ID / SSO

Conditional Access

Security & compliance

Endpoint deployment

PowerShell

Python

Cloud security & data privacy

Cross-functional collaboration

Strong communication

Tools

PowerShell

Python

Job description

TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Our robust team of in-house, U.S-based Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.

Prioritizing a people-centric mission, TrustedTech has transformed the Microsoft software licensing experience, giving IT professionals complete confidence in the success of their Microsoft investment.

Overview:

We are seeking an experienced Senior Cloud Architect, Modern Work with a strong background in implementing, consulting on, and supporting Microsoft 365 Modern Workplace cloud and hybrid solutions. Core areas include Intune, Microsoft 365 identity and mailbox migrations, Microsoft Teams Voice, Microsoft Defender, and Copilot. As part of our Professional Services team, this role partners with clients to design and implement cloud-based solutions that align with business requirements, assess existing IT environments, and identify opportunities to modernize workloads using Microsoft technologies.

Responsibilities:

• Provide expert-level guidance on mailbox, identity, and tenant migrations, including the configuration of Microsoft enterprise cloud solutions such as Active Directory, Exchange, OneDrive, SharePoint, Teams, Entra ID, and Entra Connect.
• Analyze clients’ current environments, define desired outcomes, and design solution roadmaps that improve user experience, support adoption of emerging technologies, enable automation, and enhance operational processes.
• Design and modernize Microsoft Intune environments by implementing Mobile Application Management (MAM), application protection policies, and Windows Autopilot to support secure, zero-touch device provisioning and hybrid identity scenarios.
• Define and enforce device management and security standards using Conditional Access, compliance policies, security baselines, and MDM profiles to support secure onboarding, BYOD management, and full device lifecycle management across iOS, Android, and Windows platforms.
• Lead Microsoft Teams Voice migrations by assessing existing telephony environments, designing call flow architectures, and configuring Phone System features such as auto attendants, call queues, and number porting using Calling Plans, Direct Routing, and Operator Connect.
• Support hybrid voice deployments by integrating certified SBCs and SIP trunking, optimizing network quality and security, and guiding migration execution, user enablement, and post-migration stabilization.
• Design and implement Microsoft Defender solutions across endpoints and cloud services, including Defender for Endpoint, Office 365, Identity, and Cloud Apps, to strengthen security posture through policy configuration, attack surface reduction, and automated response.
• Lead data governance and compliance initiatives by designing and deploying sensitivity labels, DLP policies, and Purview compliance solutions, while applying Conditional Access, privileged access management, and activity monitoring to protect sensitive data.
• Maintain strong working knowledge of Microsoft Power Automate, Power BI, and Microsoft Purview, applying these platforms to support automation, analytics, governance, and informed architectural decision-making.
• Support the adoption of Microsoft Copilot by advising on integration with Microsoft 365 services, defining data access and governance controls, and guiding user readiness to ensure secure and effective use.

Required Skills & Qualifications (must-haves):

• 8+ years of experience designing, implementing, and supporting cloud-based solutions, with a strong focus on Microsoft cloud technologies.
• Hands-on experience migrating collaboration platforms from Google Workspace to Microsoft 365.
• Strong working knowledge of Microsoft 365 configuration, administration, and tenant management.
• Experience designing and managing Microsoft Intune and mobile device management solutions across iOS and Android platforms.
• Solid understanding of identity and access management, including single sign-on (SSO) integration using Entra ID.
• Experience configuring and managing Conditional Access policies to support secure identity and device access.
• Working knowledge of security and compliance capabilities within the Microsoft ecosystem, including data protection and governance features.
• Experience with endpoint deployment and management solutions in hybrid and cloud-native environments.
• Proficiency with scripting and automation using tools such as PowerShell; experience with additional languages (e.g., Python) is a plus.
• Understanding of cloud security, data privacy, and regulatory compliance requirements.
• Experience collaborating with cross-functional teams, including developers, engineers, and project managers.
• Strong analytical and problem-solving skills, with the ability to identify and resolve issues effectively.
• Clear written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
• Ability to work effectively in a fast-paced environment and manage multiple priorities while meeting project deadlines.

Preferred Skills & Qualifications (nice-to-haves):

• Microsoft certifications such as Azure Solutions Architect Expert, Microsoft 365 Enterprise Administrator Expert, or comparable certifications in other cloud platforms.
• Demonstrated ability to communicate technical concepts clearly and effectively to non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to anticipate issues and contribute to effective solutions.
• Experience leading technical discussions and providing guidance to peers on best practices and solution approaches.
• Ability to work independently, take initiative, and drive tasks forward with minimal oversight.
• Ongoing interest in learning and professional development, including pursuing relevant certifications and staying current with Microsoft cloud technologies.
• Operating Hours: 6:00 am to 3:00 pm PT OR 7:00 am to 4:00 pm PT
• After hours/weekend work: As required to support production migrations and cutover events
• Estimated Salary Range: $150K - $180K (*DOE) + Bonus

• 100% employer-paid base medical coverage: HMO (CA) | PPO (out-of-state)
• Dental and vision coverage
• 401(k) with 4% company match (fully vested)
• Paid vacation, sick leave, and holidays
• Paid parental leave
• Voluntary benefits (STD*, life/AD&D, accident, critical illness, hospital)
• Employee Assistance Program (EAP)

(*Short-term Disability available for employees outside California)

*TrustedTech is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation/gender identity, or any other characteristic protected by applicable law.