Microsoft Cloud Architect & Automation Specialist

This role starts with leading the Google Workspace to Microsoft 365 migration project but transitions into long-term management of the Microsoft environment with opportunities to expand responsibility to other platforms. The ideal candidate will combine deep technical expertise with strategic thinking and automation skills to build scalable, efficient solutions. You'll have the opportunity to shape the technical direction of our environment while implementing innovative automation approaches that reduce manual effort and improve reliability.

We're looking for someone who can think beyond the immediate migration project to create a sustainable, automated environment that grows with our organization. Your ability to develop API-based solutions and automate complex processes will be crucial to success in this role.

• Serve as the primary Microsoft technical expert and decision-maker for the migration project
• Develop strategic roadmaps for both migration and long-term Microsoft environment management
• Evaluate and recommend technical solutions that align with business objectives
• Collaborate with stakeholders to establish technical requirements and success criteria
• Provide technical guidance and mentorship to team members

• Lead the migration of approximately 500 mailboxes (~2.5TB of data) from Google Workspace to M365
• Configure the migration environment according to organizational requirements
• Recommend and implement appropriate migration tools and methodologies
• Conduct test and pilot migrations with diverse use cases
• Provide post-migration support for test, pilot, and production users
• Validate migrated mailboxes for availability, mail flow, and access

• Review existing Intune cloud services in the legacy M365 tenant
• Design and implement Mobile Application Management (MAM) and application protection policies
• Configure MDM Profiles for Mobile Devices
• Implement governance policies and conditional access policies for BYOD iOS and Android devices

• Assist with licensing and license assignment automation
• Implement security baselines and configure security groups
• Design and configure the email environment including:
• Mailbox design and configuration
• Policy and structure design
• Mail flow, connectors, transport rules, SPF/DKIM/DMARC knowledge is a plus
• Shared and resource mailbox configuration
• Configure conditional access for compliant devices
• Implement endpoint security and encryption measures
• Ensure security policy alignment with legacy M365 tenant
• Configure and test imageless endpoint deployment including:
• Autopilot Management
• Endpoint compliance and conditional access policies
• Remediation scripts
• PatchMyPC integration
• Entra/Windows365 solutions for cloud PC needs
• Autopatch Management
• Application deployment
• Migrate existing endpoints to the new environment

• Configure Microsoft Purview for DLP, Information Protection, and compliance
• Implement Microsoft Defender for M365 and Defender for Endpoint
• Configure Secure Score, Attack Simulation, and Safe Links/Attachments

• Build API-based solutions to automate migration processes and ongoing management tasks
• Develop custom scripts and tools to enhance operational efficiency
• Create self-service options for common user requests to reduce IT workload
• Implement monitoring and alerting systems with automated remediation
• Establish automated testing and validation processes for configurations and updates

• Develop scalable architecture for ongoing Microsoft environment management
• Create automation roadmaps for continuous improvement of the environment
• Establish governance frameworks and best practices for system administration
• Build reporting and analytics capabilities to track system health and performance
• Plan for future expansion to manage additional platforms beyond Microsoft
• Maintain security posture through automated scanning and remediation

• Document common administrative and operational maintenance tasks
• Create documentation for custom automation solutions and APIs
• Develop runbooks for automated and manual processes
• Offer guidance on best practices for ongoing environment management

• Proven experience in migrating from Google Workspace to Microsoft 365
• In-depth knowledge of M365 configuration and administration
• Expertise in Microsoft Intune and mobile device management (iOS and Android)
• Strong understanding of identity management, including SSO integration with Okta
• Proficiency in configuring and managing conditional access policies
• Knowledge of security and compliance solutions within the Microsoft ecosystem
• Experience with endpoint management and deployment solutions
• Strong programming and scripting skills (PowerShell, Python, JavaScript, etc.)
• Experience developing and implementing API-based automation solutions
• Background in creating self-service and automated workflows for routine tasks
• Ability to design and implement infrastructure-as-code solutions
• Demonstrated ability to translate business requirements into technical solutions

• Google Workspace administration knowledge
• Familiarity with Splunk integration
• Experience with cloud-based APIs and webhooks
• Experience leveraging M.io for free/busy coexistence
• Knowledge of containerization and orchestration (Docker, Kubernetes)
• Experience with infrastructure-as-code tools (Terraform, ARM templates, etc.)
• Background in developing custom connectors and integrations between systems
• Experience with monitoring and analytics including:
• M365 Admin Center reports
• Azure AD Sign-in logs and activity logs
• Defender and Compliance dashboards
• Usage analytics (Power BI, Viva Insights)
• Microsoft certifications (MS-900, MS-100, MS-101, SC-900, etc.)
• Experience in providing client-facing consulting services
• Background in developing self-service portals and automation frameworks

• Ability to work during US Pacific Standard Time (PST) hours is required
• Remote position with occasional client meetings as needed

#LI-RT1