Solutions & Platform Architect - Microsoft

Trupanion • Seattle, WA

1d • Hybrid

About The Position

The Solutions & Platform Architect – Microsoft serves as Trupanion’s technical authority for Microsoft Identity, Security, Endpoint Management, and Zero Trust architecture. This role leads the design, engineering, deployment, and operational maturity of Microsoft Entra ID, Identity Governance, policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security and E5 capabilities.

The position combines hands-on engineering with enterprise architecture, including delivery of complex identity transformations such as Active Directory modernization, passwordless authentication, cloud-first endpoint management, and Zero Trust initiatives. The architect partners with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion’s Microsoft platform roadmap. The role is open only to candidates in the Seattle, Washington area and follows a hybrid schedule, with work in the office at least three days per week: Tuesday, Wednesday, and Thursday.

Requirements

• At least 8 years of Microsoft infrastructure engineering experience.
• At least 5 years of Microsoft identity engineering experience.
• At least 5 years of Microsoft 365 administration and architecture experience.
• At least 5 years of Intune and endpoint engineering experience.
• At least 3 years of software, tools, or automation development experience.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.
• Experience supporting regulated or compliance-driven environments.
• Expertise with Microsoft Entra ID, Conditional Access, identity governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA, and authentication flows.
• Expertise with Microsoft Intune, SCCM, Autopilot, Entra Join, hybrid join, Windows Update for Business, CIS benchmarks, and GPO migration.
• Knowledge of Global Secure Access, Entra Private Access, Entra Internet Access, and Private Application Access.
• Experience with PowerShell, Microsoft Graph, REST APIs, and Azure Automation.

Responsibilities

• Lead Active Directory dependency reduction initiatives and develop and execute an Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync, lead migration from Entra Connect architecture where appropriate, assess and reduce authentication dependencies, plan and execute ADFS retirement, and establish identity source-of-authority governance.
• Lead Microsoft’s passwordless authentication strategy; implement Microsoft Authenticator and Passkeys; design Windows Hello for Business deployment and Cloud Kerberos Trust architecture; develop phishing-resistant authentication standards and establish authentication lifecycle standards.
• Lead Intune transformation initiatives; design cloud-first endpoint management standards; drive GPO-to-Intune migration programs; implement CIS benchmark controls through Intune; modernize Windows deployment and provisioning services; and establish device lifecycle standards.
• Lead Entra Join and Autopilot transformation, including Hybrid AD-to-Entra Join transition strategies, Autopilot modernization, Cloud Kerberos Trust integrations, deployment and enrollment standards, and removal of legacy dependencies affecting modern deployments.
• Evaluate Microsoft Global Secure Access; design Entra Private Access and Entra Internet Access architectures; develop coexistence and migration strategies from Zscaler; conduct proof-of-concept testing; and create migration roadmaps and operational support models.
• Evaluate and implement Entra Identity Governance capabilities; design Joiner-Mover-Leaver workflows; develop automated access certification processes; integrate identity lifecycle management with HR systems; and improve role-based access governance and compliance.
• Develop PowerShell automation solutions and use Microsoft Graph APIs to automate provisioning and reporting, reduce operational overhead, and build self-service capabilities for users and support teams.
• Provide independent technical ownership, mentoring, cross-functional collaboration, and clear communication with technical and non-technical audiences.

Benefits

• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off and 9 paid float holidays.
• Five-week sabbatical after five years of employment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Monthly bonuses; employees are currently eligible.
• Restricted Stock Units granted to new team members, vesting over four years.
• Free on-site gym.
• Free dog-walking services for office pets during business hours.
• Free parking.
• Paid ORCA cards.
• Casual, pet-friendly office environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed