Solutions & Platform Architect - Microsoft

Trupanion • Seattle, WA

2h • $145,000 - $165,000 • Hybrid

About The Position

The Solutions & Platform Architect – Microsoft serves as Trupanion’s technical authority for Microsoft Identity, Security, Endpoint Management, and Zero Trust architecture. The role leads the design, engineering, deployment, and operational maturity of Microsoft Entra ID, Identity Governance, policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security/E5 capabilities.

The position combines hands-on engineering expertise with enterprise architecture capabilities. The architect will lead complex identity transformations, including Active Directory modernization, passwordless authentication, cloud-first endpoint management, and Zero Trust initiatives. The role partners with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion’s Microsoft platform roadmap.

This position is open to candidates in the Seattle, Washington area. The schedule is hybrid, with work from the casual, pet-friendly office at least three days a week—every Tuesday, Wednesday, and Thursday.

Requirements

• At least 8 years of Microsoft infrastructure engineering experience.
• At least 5 years of Microsoft identity engineering experience.
• At least 5 years of Microsoft 365 administration and architecture experience.
• At least 5 years of Intune and endpoint engineering experience.
• At least 3 years of software, tools, or automation development experience.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.
• Experience supporting regulated or compliance-driven environments.
• Skills and experience with Microsoft Entra ID, Conditional Access, identity governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA, and authentication flows.
• Skills and experience with Microsoft Intune, SCCM, Autopilot, Entra Join, hybrid join, Windows Update for Business, CIS benchmarks, and GPO migration.
• Skills and experience with GSA, Entra Private Access, Entra Internet Access, and Private Application Access.
• Skills and experience with PowerShell, Microsoft Graph, REST APIs, and Azure Automation.
• Applicants must be authorized to work for any employer in the U.S.; Trupanion is unable to sponsor or take over sponsorship of an employment visa.

Responsibilities

• Lead Active Directory dependency-reduction initiatives and develop and execute an Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync; lead migration from Entra Connect architecture where appropriate; assess and reduce authentication dependencies; and plan and execute ADFS retirement.
• Establish identity source-of-authority governance.
• Lead Microsoft passwordless authentication strategy; implement Microsoft Authenticator and Passkeys; design Windows Hello for Business deployment; implement Cloud Kerberos Trust architecture; develop phishing-resistant authentication standards; and establish authentication lifecycle standards.
• Lead Intune transformation initiatives; design cloud-first endpoint management standards; drive GPO-to-Intune migration programs; implement CIS benchmark controls through Intune; modernize Windows deployment and provisioning services; and establish device lifecycle standards.
• Lead Hybrid AD to Entra Join transition strategies and Autopilot modernization; implement Cloud Kerberos Trust integrations; design deployment and enrollment standards; and remove legacy dependencies affecting modern deployments.
• Lead evaluation of Microsoft Global Secure Access; design Entra Private Access and Entra Internet Access architectures; develop coexistence and migration strategies from Zscaler; conduct proof-of-concept testing; and create migration roadmaps and operational support models.
• Evaluate and implement Entra Identity Governance capabilities; design Joiner-Mover-Leaver workflows; develop automated access certification processes; integrate identity lifecycle management with HR systems; and improve role-based access governance and compliance.
• Develop PowerShell automation solutions and use Microsoft Graph APIs to automate provisioning and reporting, reduce operational overhead, and build self-service capabilities for users and support teams.
• Provide independent technical ownership, mentor others, collaborate cross-functionally, and communicate clearly with technical and non-technical audiences.

Benefits

• Monthly bonuses; employees are currently eligible.
• Restricted Stock Unit grants for new team members, vesting over four years.
• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off and nine paid floating holidays.
• Five-week sabbatical after five years of employment.
• Casual, pet-friendly office environment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Seattle office amenities include a free on-site gym, free dog-walking services for office pets during business hours, free parking, and paid ORCA cards.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed