Systems Engineer, Architecture

This is a fully remote position, open to applicants in Florida.

📋 Description

• Define and uphold the target-state architecture for Shield's internal systems, encompassing identity, endpoint, collaboration, and cloud platforms.

• Maintain the technology roadmap and orchestrate transitions from the current state to the desired target state.

• Create and enforce technical standards for configuration, security baselines, naming conventions, tenancy, and integration patterns.

• Act as the design authority for new tools and platform modifications.

• Manage identity architecture across Entra ID and associated SaaS, including SSO, SCIM provisioning, conditional access, and privileged access frameworks.

• Design integrations among HRIS-driven provisioning, PSA and ticketing platforms, as well as automation workflows.

• Evaluate the technology stacks of acquired companies and formulate migration and consolidation strategies for tenants, identity, and endpoints.

• Develop repeatable M&A integration playbooks.

• Assess emerging platforms and strategize the retirement and replacement of legacy systems.

• Lead proofs of concept and generate decision records that provide clear rationale and trade-offs.

• Collaborate with IT security to integrate Zero Trust principles, device compliance, encryption, MFA, and EDR into platform designs.

• Preserve architecture diagrams, design standards, and decision records for the wider IS&T team.

⛳️ Requirements

• Extensive, design-level expertise with Microsoft 365 tenancy, Exchange, SharePoint, Teams, and Entra ID, including multi-tenant and tenant consolidation scenarios.

• In-depth knowledge of Microsoft Intune and Apple Business Manager, covering policy design, compliance frameworks, and zero-touch provisioning for both Windows and macOS.

• Strong understanding of IAM design, including SSO, SAML, OIDC, SCIM, conditional access, and both role-based and privileged access models.

• Practical knowledge of Azure, including identity integration, networking fundamentals, and the connection of cloud services to internal business systems; AWS experience is advantageous.

• Proven experience in designing integrations and automation across SaaS platforms using APIs, iPaaS tools, PowerShell, or Graph API.

• Familiarity with security frameworks and remote-first best practices, including Zero Trust, disk encryption, MFA enforcement, and EDR.

• Previous experience with technology due diligence, tenant migrations, or environment consolidation is highly preferred.

• Ability to conceptualize systems and lifecycles, evaluate trade-offs, and design for organizational expansion.

• Capability to articulate architectural decisions to both technical and non-technical stakeholders and document designs clearly.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health benefits, including medical, dental, and vision coverage.

• Flexible work hours and remote work opportunities.

• Professional development and training programs to enhance skills.

• Generous vacation and paid time off policies.