Cloud Architect, Modern Work

Job Description

Who We Are:

\n

TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Our robust team of in-house, U.S-based Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.

\n

\n

Prioritizing a people-centric mission, TrustedTech has transformed the Microsoft software licensing experience, giving IT professionals complete confidence in the success of their Microsoft investment.

\n

\n

Overview:

\n

We are seeking an experienced Cloud Architect, Modern Work with a strong background in implementing, consulting on, and supporting Microsoft 365 Modern Workplace cloud and hybrid solutions. Core areas include Intune, Microsoft 365 identity and mailbox migrations, Microsoft Teams Voice, Microsoft Defender, and Copilot. As part of our Professional Services team, this role partners with clients to design and implement cloud-based solutions that align with business requirements, assess existing IT environments, and identify opportunities to modernize workloads using Microsoft technologies.

\n

\n

Responsibilities:

\n

\n
• Provide expert-level guidance on mailbox, identity, and tenant migrations, including the configuration of Microsoft enterprise cloud solutions such as Active Directory, Exchange, OneDrive, SharePoint, Teams, Entra ID, and Entra Connect.
\n
• Analyze clients’ current environments, define desired outcomes, and design solution roadmaps that improve user experience, support adoption of emerging technologies, enable automation, and enhance operational processes.
\n
• Design and modernize Microsoft Intune environments by implementing Mobile Application Management (MAM), application protection policies, and Windows Autopilot to support secure, zero-touch device provisioning and hybrid identity scenarios.
\n
• Define and enforce device management and security standards using Conditional Access, compliance policies, security baselines, and MDM profiles to support secure onboarding, BYOD management, and full device lifecycle management across iOS, Android, and Windows platforms.
\n
• Lead Microsoft Teams Voice migrations by assessing existing telephony environments, designing call flow architectures, and configuring Phone System features such as auto attendants, call queues, and number porting using Calling Plans, Direct Routing, and Operator Connect.
\n
• Support hybrid voice deployments by integrating certified SBCs and SIP trunking, optimizing network quality and security, and guiding migration execution, user enablement, and post-migration stabilization.
\n
• Design and implement Microsoft Defender solutions across endpoints and cloud services, including Defender for Endpoint, Office 365, Identity, and Cloud Apps, to strengthen security posture through policy configuration, attack surface reduction, and automated response.
\n
• Lead data governance and compliance initiatives by designing and deploying sensitivity labels, DLP policies, and Purview compliance solutions, while applying Conditional Access, privileged access management, and activity monitoring to protect sensitive data.
\n
• Maintain strong working knowledge of Microsoft Power Automate, Power BI, and Microsoft Purview, applying these platforms to support automation, analytics, governance, and informed architectural decision-making.
\n
• Support the adoption of Microsoft Copilot by advising on integration with Microsoft 365 services, defining data access and governance controls, and guiding user readiness to ensure secure and effective use.
\n

\n

\n

Required Skills & Qualifications (must-haves):

\n

\n
• 8+ years of experience designing, implementing, and supporting cloud-based solutions, with a strong focus on Microsoft cloud technologies.
\n
• Hands-on experience migrating collaboration platforms from Google Workspace to Microsoft 365.
\n
• Strong working knowledge of Microsoft 365 configuration, administration, and tenant management.
\n
• Experience designing and managing Microsoft Intune and mobile device management solutions across iOS and Android platforms.
\n
• Solid understanding of identity and access management, including single sign-on (SSO) integration using Entra ID.
\n
• Experience configuring and managing Conditional Access policies to support secure identity and device access.
\n
• Working knowledge of security and compliance capabilities within the Microsoft ecosystem, including data protection and governance features.
\n
• Experience with endpoint deployment and management solutions in hybrid and cloud-native environments.
\n
• Proficiency with scripting and automation using tools such as PowerShell; experience with additional languages (e.g., Python) is a plus.
\n
• Understanding of cloud security, data privacy, and regulatory compliance requirements.
\n
• Experience collaborating with cross-functional teams, including developers, engineers, and project managers.
\n
• Strong analytical and problem-solving skills, with the ability to identify and resolve issues effectively.
\n
• Clear written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
\n
• Ability to work effectively in a fast-paced environment and manage multiple priorities while meeting project deadlines.
\n

\n

\n

Preferred Skills & Qualifications (nice-to-haves):

\n

\n
• Microsoft certifications such as Azure Solutions Architect Expert, Microsoft 365 Enterprise Administrator Expert, or comparable certifications in other cloud platforms.
\n
• Demonstrated ability to communicate technical concepts clearly and effectively to non-technical stakeholders.
\n
• Strong analytical and problem-solving skills, with the ability to anticipate issues and contribute to effective solutions.
\n
• Experience leading technical discussions and providing guidance to peers on best practices and solution approaches.
\n
• Ability to work independently, take initiative, and drive tasks forward with minimal oversight.
\n
• Ongoing interest in learning and professional development, including pursuing relevant certifications and staying current with Microsoft cloud technologies.
\n

\n

\n

Working Environment & Compensation Details:

\n

\n
• Environment: Remote (U.S.), Monday – Friday
\n
• Operating Hours: 6:00 am to 3:00 pm PT OR 7:00 am to 4:00 pm PT
\n
• After hours/weekend work: As required to support production migrations and cutover events
\n
• Estimated Salary Range: $130K - $160K (*DOE) + Bonus
\n

\n

\n

Benefits:

\n

- 100% employer-paid base medical coverage: HMO (CA) | PPO (out-of-state)

\n

- Dental and vision coverage

\n

- 401(k) with 4% company match (fully vested)

\n

- Paid vacation, sick leave, and holidays

\n

- Paid parental leave

\n

- Voluntary benefits (STD*, life/AD&D, accident, critical illness, hospital)

\n

- Employee Assistance Program (EAP)

\n

- Pet discount plans

\n

- Microsoft reimbursement program

\n

(*Short-term Disability available for employees outside California)

\n

\n

*TrustedTech is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation/gender identity, or any other characteristic protected by applicable law.*