Microsoft 365 Architect

AFL•Dallas, TX

6h•Hybrid

About The Position

AFL manufactures industry-leading fiber optic cable, connectivity and accessories and provides engineering and installation services for some of the largest telecom customers in the world. Our company was founded in 1984 with a single fiber optic cable and today, we manufacture thousands of products, generate an excess of $2B in revenue, and employ approximately 11,000 associates worldwide. At AFL, we recognize that our employees are our greatest asset. We hire and train each individual, investing in them to ensure success in their careers. With a commitment to professional development and growth, let us connect you to your next career opportunity. We are seeking an experienced Microsoft 365 Domain Architect to own, operate, and continuously improve our enterprise Microsoft cloud environment. This role serves as the technical authority for Microsoft 365, Intune, Entra ID (Azure AD), and the Power Platform, ensuring platform stability, security, scalability, and high user satisfaction. The ideal candidate combines deep hands-on administration expertise with strong governance and enablement skills. You will manage the full lifecycle of M365 services while empowering business users and citizen developers to safely and effectively leverage low-code tools across the organization. After gaining knowledge of our environment, there is the opportunity for this position to work under our Hybrid schedule working both in the office and remotely.

Requirements

10-12 years of enterprise-level Microsoft 365 administration experience
Strong expertise in Microsoft Intune and endpoint management
Hands-on experience administering Microsoft Teams Phone System, including Direct Routing
Experience with email security platforms (Proofpoint preferred; Mimecast, Barracuda acceptable)
Proven administration of Power Platform (Power Apps, Power Automate, Power BI)
Strong understanding of Entra ID (Azure AD), authentication, and identity governance
Experience with PowerShell scripting for M365 and Azure automation
Knowledge of Microsoft 365 security and compliance features (DLP, retention, sensitivity labels)
Bachelor’s degree in Information Technology, Computer Science, or equivalent experience
Strong analytical, troubleshooting, and organizational skills
Excellent communication skills with the ability to explain technical concepts to non-technical audiences
Ability to manage multiple priorities independently in a fast-paced environment
Ability to review and troubleshoot Power Apps (canvas and model-driven)
Understanding of Power Automate design patterns and best practices
Familiarity with Dataverse, data modeling, and connectors
Experience supporting or mentoring citizen developers

Nice To Haves

Microsoft certifications such as MS-102, MS-900, PL-200, PL-300, or AZ-104
Experience with Microsoft Graph API and automation
Knowledge of SharePoint Online architecture and site design
Familiarity with SBCs, PSTN connectivity, and Teams telephony infrastructure
Experience with Teams governance and lifecycle management
Exposure to Azure Logic Apps, Azure Functions, or related services
Understanding of networking fundamentals, DNS, and certificate management
Experience implementing Zero Trust security principles
Familiarity with ITIL or other IT service management frameworks

Responsibilities

Serve as the primary administrator for the Microsoft 365 tenants, including Exchange Online, SharePoint Online, OneDrive, Teams, and supporting services
Manage Microsoft Teams Phone System, including calling policies, dial plans, voice routing, Direct Routing, auto attendants, calling queues, and emergency calling
Oversee user lifecycle management, licensing, role assignments, permissions, and access controls
Configure and maintain security, compliance, retention, and data governance policies
Administer email security gateways (Proofpoint or equivalent), including policy configuration, monitoring, and incident response
Monitor service health, troubleshoot platform issues, and engage Microsoft support as needed
Plan and execute tenant-wide configuration changes, feature rollouts, and service optimizations
Design, implement, and maintain device management strategies using Microsoft Intune
Manage MDM and MAM policies across Windows, iOS, and Android platforms
Configure Conditional Access and device compliance policies
Coordinate with the Tanium team on endpoint management integration and policy enforcement
Troubleshoot endpoint configuration, enrollment, and compliance issues
Administer Power Platform environments, including environment strategy, security roles, and DLP policies
Manage Power Apps, Power Automate, and Power BI service configurations
Monitor platform usage, licensing, and capacity
Establish and enforce governance standards and best practices
Provide guidance and oversight for citizen developers building Power Platform solutions
Administer Entra ID (Azure Active Directory), including users, groups, enterprise applications, and identity protection
Configure and maintain hybrid identity solutions using Azure AD Connect
Implement Privileged Identity Management (PIM) and identity security controls
Support Azure resources that integrate with Microsoft 365 services
Assist with Azure provisioning and operational support as required
Support and mentor citizen developers using Power Apps and Power Automate
Review and optimize apps and flows for performance, reliability, and maintainability
Create reusable templates, components, and solution patterns
Deliver training sessions and produce technical documentation
Partner with IT and business stakeholders to translate requirements into scalable platform solutions
Maintain accurate documentation of platform architecture, configurations, and operational procedures
Produce reports on platform usage, adoption, security posture, and service performance
Ensure compliance with internal policies, regulatory requirements, and security standards
Participate in audits and provide required evidence and documentation