Sr Microsoft Cloud Architect

Tgipower Llc; Boca Raton (FL); Remote; USD 110,000 - 180,000; Full time

Benefits offered by this job

Dental insurance

Health insurance

Vision Insurance

Life Insurance

PTO

401(k)

Job summary

Tgipower Llc is seeking a Senior Microsoft Cloud Architect to design, implement, and operate Microsoft cloud security and management platforms. You will work across Azure, Microsoft 365, and Entra ID with a security-first mindset.

The role requires hands-on production experience with Sentinel, Defender, Purview DLP, and Intune, plus strong PowerShell scripting and hybrid identity skills. This is a remote, full-time position in the United States.

Qualifications

• 8+ years IT infrastructure or cloud engineering experience.

Responsibilities

• Design and govern enterprise architectures across Azure, Microsoft 365, and Entra ID.
• Lead cloud modernization initiatives with security-first design principles.
• Architect, deploy, and manage Microsoft Sentinel in production environments.
• Design and operate Microsoft Defender solutions (Endpoint, Office 365, Identity, Cloud).
• Architect and manage Microsoft Intune across Windows, macOS, iOS, and Android.

Skills

PowerShell scripting

Entra ID

Azure networking

Hybrid identity

Terraform

Microsoft Graph

Azure IaaS/PaaS

Azure AD Connect

Security operations

Architecture diagrams

Education

Azure Solutions Architect Expert (AZ-305)

Cybersecurity Architect Expert (SC-100)

Microsoft 365 Certification: Endpoint Administrator (MD-102)

Identity and Access Administrator Associate (SC-300)

Security Operations Analyst Associate (SC-200)

Tools

Terraform

ARM/Bicep

Microsoft Graph

PowerShell

Azure Portal/CLI

Job description

Job Title: Sr. Microsoft Cloud ArchitectReports to: Director of EngineeringSummary: We are seeking a Senior Microsoft Cloud Architect with proven, real-world hands-on experience designing, implementing, and operating Microsoft cloud security and management platforms. This role requires deep production experience with Microsoft Sentinel, Microsoft Defender, Microsoft Purview (DLP), and Microsoft Intune, not just exposure or academic knowledge.Responsibilities:Cloud Architecture & StrategyDesign and govern enterprise architectures across Azure, Microsoft 365, and Entra IDLead cloud modernization initiatives with security-first design principlesDefine architectural standards, reference designs, and best practicesSecurity Engineering (Hands-On Required)Architect, deploy, and manage Microsoft Sentinel in production environmentsDesign and operate Microsoft Defender solutions (Endpoint, Office 365, Identity, Cloud)Implement Microsoft Purview DLP across Exchange, SharePoint, OneDrive, and TeamsEndpoint & Device Management (Hands-On Required)Architect and manage Microsoft Intune across Windows, macOS, iOS, and AndroidImplement Autopilot and compliance-based enrollment strategiesAzure & InfrastructureArchitect Azure IaaS and PaaS workloads and DR strategiesImplement Azure Virtual Desktop and Windows 365 solutionsRequired Qualifications:8+ years IT infrastructure or cloud engineering experience5+ years hands-on Microsoft Azure and Microsoft 365 experienceDemonstrated production experience with Sentinel, Defender, Purview DLP, and IntuneStrong PowerShell scripting experienceDeep expertise with Entra ID, including Conditional Access, MFA, identity governance, and privileged access controlsStrong experience with Azure networking, including VNets, VPN, ExpressRoute, NSGs, Azure Firewall, and private connectivity patternsHands-on experience with hybrid identity, Active Directory, Azure AD Connect, Group Policy, and migration from legacy infrastructureExperience automating cloud operations using PowerShell, Microsoft Graph, ARM/Bicep, Terraform, or similar infrastructure-as-code toolsProven experience with cloud monitoring, logging, incident response, and security operations in regulated or enterprise-scale environmentsWorking knowledge of compliance and governance frameworks such as CIS, NIST, ISO 27001, or Microsoft security baseline standardsAbility to produce high-quality architecture diagrams, technical documentation, implementation runbooks, and executive-ready design recommendationsCertifications:Microsoft Certified: Azure Solutions Architect Expert (AZ-305) requiredMicrosoft Certified: Cybersecurity Architect Expert (SC-100) strongly preferred; candidates with Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or Security Operations Analyst Associate (SC-200) plus equivalent architecture experience may also be consideredMicrosoft 365 Certified: Endpoint Administrator Associate (MD-102) preferred for candidates leading Intune, Autopilot, and endpoint security implementationsHands-On Productions Requirements:Proven experience deploying and supporting Microsoft cloud technologies in live enterprise environments, including Microsoft Sentinel, Defender, Purview, Intune, and Windows AutopilotHands-on experience with security configuration, policy deployment, incident response, endpoint management, application packaging, compliance enforcement, and remediation workflows.Experience leading production deployments, post-deployment stabilization, operational handoff, and ongoing optimization of Microsoft 365/cloud solutions.Candidates should be able to discuss production implementations, architecture decisions, operational challenges, and measurable business outcomes from prior deployments.Job Type: Full-timeSalary: $110,000 - $180,000 per yearBenefits: Dental insurance, Health insurance, Vision Insurance, Life Insurance, PTO, and 401(k)Schedule: Monday to FridayWork Location: RemoteEEO Statement:We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.