Solutions & Platform Architect - Microsoft

Trupanion1; Seattle (WA); Hybrid; USD 145,000 - 165,000; Full time

Benefits offered by this job

Medical benefits

PTO & holidays

Sabbatical after 5 years

Pet-friendly office

Restricted Stock Units

Job summary

Trupanion is seeking a Solutions & Platform Architect focusing on Microsoft identity, security, and endpoint management. You will architect Entra ID, ADFS retirement, passwordless strategies, and Cloud Kerberos while partnering with IT, security, and compliance teams.

The role demands hands-on engineering and enterprise architecture capabilities to deliver a mature Microsoft platform roadmap for identity, security, and device management.

Qualifications

• 8+ years Microsoft infrastructure engineering experience.
• 5+ years Microsoft identity engineering experience.
• 5+ years Microsoft 365 administration and architecture.
• 5+ years Intune and endpoint engineering.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.

Responsibilities

• Lead design, engineering, deployment, and operation of Microsoft Entra and related security tools.
• Own identity modernization, authentication strategy, and Zero Trust governance.
• Drive hybrid AD to Entra Join transitions and Autopilot modernization.
• Develop migration roadmaps, standards, and operational support models.

Skills

Entra ID

Conditional Access

Identity governance

PIM

Cloud Sync

Entra Connect

ADFS

SSO

MFA

Automation

Tools

PowerShell

Microsoft Graph

REST APIs

Azure Automation

Job description

US - Seattle only : This position is open to candidates in the Seattle, WA area. You will have a hybrid remote/in-office schedule where you will work from our casual, pet-friendly office at least 3 days a week (Tuesday, Wednesday, and Thursday). Remote candidate may be considered based on experience.

The Solutions & Platform Architect - Microsoft serves as the organization's technical authority for Microsoft Identity, Security, Endpoint Management, and Zero Trust architecture. This role will lead the design, engineering, deployment, and operational maturity of Microsoft Entra ID, Identity Governance, Policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security/E5 capabilities.

The ideal candidate combines deep hands-on engineering expertise with enterprise architecture capabilities and has successfully delivered complex identity transformations including Active Directory modernization, password less authentication, cloud-first endpoint management, and Zero Trust initiatives. This individual will partner closely with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion's Microsoft platform roadmap.

Responsibilities

Identity Modernization

• Lead Active Directory dependency reduction initiatives.
• Develop and execute Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync.
• Lead migration from Entra Connect architecture where appropriate.
• Assess and reduce authentication dependencies.
• Drive ADFS retirement planning and execution.
• Establish identity source-of-authority governance

Authentication & Access Management

• Lead Microsoft's passwordless authentication strategy.
• Implement Microsoft Authenticator and Passkeys.
• Design Windows Hello for Business deployment.
• Implement Cloud Kerberos Trust architecture.
• Develop phishing-resistant authentication standards.
• Establish authentication lifecycle standards.

Endpoint Modernization

• Lead Intune transformation initiatives.
• Design cloud-first endpoint management standards.
• Drive GPO-to-Intune migration programs.
• Implement CIS benchmark controls through Intune.
• Modernize Windows deployment and provisioning services.
• Establish device lifecycle standards.

Entra Join & Autopilot Transformation

• Lead Hybrid AD to Entra Join transition strategies.
• Architect Autopilot modernization initiatives.
• Implement Cloud Kerberos Trust integrations.
• Design deployment and enrollment standards.
• Remove legacy dependencies impacting modern deployments.

Secure Access Architecture

• Lead evaluation of Microsoft Global Secure Access.
• Design Entra Private Access architecture.
• Design Entra Internet Access architecture.
• Develop coexistence and migration strategies from Zscaler.
• Conduct proof-of-concept testing.
• Create migration roadmaps and operational support models.

Identity Governance

• Evaluate and implement Entra Identity Governance capabilities.
• Design Joiner-Mover-Leaver workflows.
• Develop automated access certification processes.
• Integrate identity lifecycle management with HR systems.
• Improve role-based access governance and compliance.

Automation & Engineering

• Develop PowerShell automation solutions.
• Utilize Microsoft Graph APIs.
• Automate provisioning and reporting.
• Reduce operational overhead through engineering practices.
• Build self‑service capabilities for users and support teams.

Skills

• Microsoft Entra ID, Conditional Access, Identity governance, PIM, Cloud sync, Entra connect, ADFS, SSO, MFA, Authentication flow.
• Microsoft Intune, SCCM, Autopilot, Entra join, hybrid join, Windows update for business, CIS benchmarks, GPO migration
• GSA, Entra Private Access, Entra Internet Access, Private Application Access
• Powershell, Microsoft Graph, REST APIs, Azure Automation
• Independent technical ownership, mentoring, cross-functional collaboration, and clear communication with technical and non-technical audiences

Required Qualifications

• 8+ years Microsoft infrastructure engineering
• 5+ years Microsoft identity engineering
• 5+ years Microsoft 365 administration and architecture
• 5+ years Intune and endpoint engineering
• Experience leading enterprise transformation programs
• Experience designing Zero Trust architecture
• Experience supporting regulated or compliance-driven environments

Compensation

• The base salary range for this position is $145,000 - $165,000 on a full‑time schedule.
• Along with base compensation, Trupanion employees are currently eligible for monthly bonuses.
• We want all employees to be invested in Trupanion's success, so we grant Restricted Stock Units to all new team members. Our new hire grants vest over 4 years.

Benefits and Perks

• Full medical, dental, and vision benefits at no cost to the employee
• Four weeks of paid time off and 9 paid float holidays (you can decide which days are most important to you!)
• Five-week sabbatical after five years of employment
• Open, casual, pet-friendly, and fun office environment
• Free medical h