Microsoft 365 Architect

Job Description

Microsoft 365 Architect

Exchange Online Exchange Server hybrid SharePoint Online OneDrive Power Platform Purview SendGrid Exclaimer

Role Summary

The M365 Architect owns the endtoend design authority for the customers Microsoft 365 estate across collaboration messaging content services compliance and lowcode automation

The role is accountable for architecture decisions design documentation standards and governance and for driving L3 escalations that require designlevel intervention

This is a clientfacing onsite role that partners with the customers IT leadership security and infrastructure teams and leads the offshore L3 engineering pod

ShiftBusiness hours aligned to CST with oncall participation for P1P2 and change windows

Experience12 years in IT infrastructure of which 6 years in Microsoft 365 architecture and migrations

Reports ToService Delivery Manager Tower Lead

Team InterfaceL1L15 Service Desk L2 Operations offshore L3 pod client security network and identity teams

Key Responsibilities

Architecture and Design

Own the targetstate architecture for Exchange Online and onpremises hybrid SharePoint Online OneDrive for Business Teams filecollaboration integration Power Platform and Purview

Produce and maintain HLDLLD design decision records asbuilt documentation standards and reference patterns secure client architecture review board approval

Define tenant configuration baselines governance guardrails and lifecycle policies for sites teams groups guests and external sharing

Assess and remediate technical debt legacy Exchange servers public folders unsupported clients orphaned sites oversized OneDrive estates

Conduct design reviews and provide signoff on changes classified as highrisk or architecturally significant

Messaging Exchange and Mail Flow

Design and govern hybrid Exchange topology mail routing connectors Autodiscover freebusy and crossforest coexistence

Own mail hygiene and transport architecture Exchange Online Protection Defender for Office 365 policies antispamantiphish transport rules journaling

Design and govern SPF DKIM and DMARC records and enforcement posture across all sending domains including thirdparty senders

Own applicationrelay mail architecture including SendGrid domain authentication dedicated IPs subuser and API key model suppression lists deliverability and bounce management IP warmup and reputation monitoring

Own enterprise email signature and disclaimer management through Exclaimer template design AD attribute mapping campaign banners rules by departmentregion and integration with Exchange Online transport or clientside deployment

Define mailbox provisioning standards sharedresource mailbox models retention and archiving including migration off legacy archive platforms

Content Services SharePoint and OneDrive

Architect SharePoint Online information architecture hubsite topology navigation metadata search content types and term store

Design fileshare and legacy SharePoint onpremises migration strategy and tooling ShareGate Migration Manager Mover including sizing throttling cutover and validation

Define OneDrive Known Folder Move sync client policy storage quotas retention on leaver accounts and offboarding data handling

Define permissions model sharing controls sensitivitylabel driven site protection and access review process

Compliance Microsoft Purview

Design and implement sensitivity labels and autolabelling DLP policies across Exchange SharePoint OneDrive Teams and endpoints

Design retention labels and policies records management litigation hold and eDiscovery Premium workflows with Legal and HR

Implement Insider Risk Management Communication Compliance and Audit Premium where in scope define triage and escalation into the service desk

Map control requirements from regulatory and customer security frameworks to Purview configuration and evidence artefacts

Power Platform

Define Power Platform governance environment strategy DLP connector policies Managed Environments CoE Starter Kit adoption licensing and capacity management

Provide design guidance and codesolution review for Power Apps Power Automate flows and Dataverse usage establish ALM using solutions and pipelines

Identify and shepherd automation opportunities that reduce service desk and operational ticket volume

Operations L3 Escalation and Governance

Act as final technical escalation point for M365 P1P2 incidents lead roo