Team Lead - M365 and AD/EntraID Technical Architect

Role & responsibilities

• Architect end-to-end M365 solutions including Exchange, Intune, SharePoint, OneDrive, and EntraID
• Designing, implementing, and managing Entra ID and Active Directory infrastructure, including identity and access management policies, synchronization, and authentication methods (SSO, MFA, Conditional Access).
• Implementing and enforcing security policies, managing Conditional Access controls, and ensuring compliance with regulatory requirements and industry best practices.
• Drive governance of Entra ID Enterprise Applications by standardizing permission scopes, enabling periodic access reviews, and ensuring only approved, non-redundant apps are onboarded.
• Implement and maintain lifecycle management for app registrations, including periodic reviews for usage, ownership validation, and decommissioning of inactive or duplicate applications.
• Leading migrations from on-premises or third-party platforms to Microsoft 365, integrating M365 with Active Directory, enterprise applications, and cloud services.
• Diagnosing and resolving complex issues related to M365 and Active Directory, collaborating with internal and external teams.
• Partnering with IT leadership, technical teams, and other stakeholders to align M365 services with business needs and security policies.
• Define Defender strategy across email, endpoint, and identity layers
• Maintaining a deep understanding of Microsoft Entra ID, Active Directory, and related core technologies, including PowerShell scripting and automation.
• Architect Microsoft Purview implementation to support global compliance frameworks (GDPR,HIPAA, etc.)
• Design automated workflows and reporting tools using PowerShell and Graph API- Define conditional access strategies and zero-trust identity architectures.
• Regularly liaise with global stakeholders and onshore leadership to coordinate project activities and drive continuous service improvements.
• Provide regular feedback and insights to global architecture teams to influence future technology roadmaps.
• Mentor GCC Engineering teams on architecture best practices, cloud identity management, and automation.
• Represent GCC capabilities in global architectural forums, reviews, and planning sessions.

Preferred candidate profile

• Enterprise-level knowledge of all M365 services and hybrid identity
• Extensive experience in Defender and security baselines for Microsoft environments
• Strong architectural experience with Purview for eDiscovery, labeling, and compliance
• Expert in PowerShell scripting and cloud automation strategies
• Strong understanding of identity and access management principles, Active Directory, Microsoft Entra ID, and Microsoft 365.
• Proven experience designing, implementing, and managing Entra ID and Active Directory solutions in medium to large-scale environments.