Microsoft Cloud Architect & Automation Specialist

About the Role

This role starts with leading the Google Workspace to Microsoft 365 migration project but transitions into long-term management of the Microsoft environment with opportunities to expand responsibility to other platforms. The ideal candidate will combine deep technical expertise with strategic thinking and automation skills to build scalable, efficient solutions. You'll have the opportunity to shape the technical direction of our environment while implementing innovative automation approaches that reduce manual effort and improve reliability.

We're looking for someone who can think beyond the immediate migration project to create a sustainable, automated environment that grows with our organization. Your ability to develop API-based solutions and automate complex processes will be crucial to success in this role.

What you will do

Technical Leadership & Strategy

• Serve as the primary Microsoft technical expert and decision-maker for the migration project
• Develop strategic roadmaps for both migration and long-term Microsoft environment management
• Evaluate and recommend technical solutions that align with business objectives
• Collaborate with stakeholders to establish technical requirements and success criteria
• Provide technical guidance and mentorship to team members

Google Workspace to Microsoft 365 Migration

• Lead the migration of approximately 500 mailboxes (~2.5TB of data) from Google Workspace to M365
• Configure the migration environment according to organizational requirements
• Recommend and implement appropriate migration tools and methodologies
• Conduct test and pilot migrations with diverse use cases
• Provide post-migration support for test, pilot, and production users
• Validate migrated mailboxes for availability, mail flow, and access

Microsoft Intune Configuration and Management

• Review existing Intune cloud services in the legacy M365 tenant
• Design and implement Mobile Application Management (MAM) and application protection policies
• Configure MDM Profiles for Mobile Devices
• Implement governance policies and conditional access policies for BYOD iOS and Android devices

Environment Preparation and Configuration

• Assist with licensing and license assignment automation
• Implement security baselines and configure security groups
• Design and configure the email environment including:
• Mailbox design and configuration
• Policy and structure design
• Mail flow, connectors, transport rules, SPF/DKIM/DMARC knowledge is a plus
• Shared and resource mailbox configuration
• Configure conditional access for compliant devices
• Implement endpoint security and encryption measures
• Ensure security policy alignment with legacy M365 tenant
• Configure and test imageless endpoint deployment including:
• Autopilot Management
• Endpoint compliance and conditional access policies
• Remediation scripts
• PatchMyPC integration
• Entra/Windows365 solutions for cloud PC needs
• Autopatch Management
• Application deployment
• Migrate existing endpoints to the new environment

Security and Compliance

• Configure Microsoft Purview for DLP, Information Protection, and compliance
• Implement Microsoft Defender for M365 and Defender for Endpoint
• Configure Secure Score, Attack Simulation, and Safe Links/Attachments

Automation and Process Improvement

• Build API-based solutions to automate migration processes and ongoing management tasks
• Develop custom scripts and tools to enhance operational efficiency
• Create self-service options for common user requests to reduce IT workload
• Implement monitoring and alerting systems with automated remediation
• Establish automated testing and validation processes for configurations and updates

Long-Term Environment Management

• Develop scalable architecture for ongoing Microsoft environment management
• Create automation roadmaps for continuous improvement of the environment
• Establish governance frameworks and best practices for system administration
• Build reporting and analytics capabilities to track system health and performance
• Plan for future expansion to manage additional platforms beyond Microsoft
• Maintain security posture through automated scanning and remediation

Knowledge Transfer and Documentation

• Document common administrative and operational maintenance ta