Solutions & Platform Architect - Microsoft

Trupanion • Seattle, WA

12h • $145,000 - $165,000 • Hybrid

About The Position

The Solutions & Platform Architect – Microsoft serves as Trupanion’s technical authority for Microsoft Identity, Security, Endpoint Management, and Zero Trust architecture. The role leads the design, engineering, deployment, and operational maturity of Microsoft Entra ID, Identity Governance, policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security and E5 capabilities.

The position combines hands-on engineering with enterprise architecture and focuses on delivering complex identity transformations, including Active Directory modernization, passwordless authentication, cloud-first endpoint management, and Zero Trust initiatives. The architect partners with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion’s Microsoft platform roadmap.

This position is open to candidates in the Seattle, Washington area. It follows a hybrid schedule, with work from Trupanion’s office at least three days per week—Tuesday, Wednesday, and Thursday.

Requirements

• At least 8 years of Microsoft infrastructure engineering experience.
• At least 5 years of Microsoft identity engineering experience.
• At least 5 years of Microsoft 365 administration and architecture experience.
• At least 5 years of Intune and endpoint engineering experience.
• At least 3 years of software, tools, or automation development experience.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.
• Experience supporting regulated or compliance-driven environments.
• Skills in Microsoft Entra ID, Conditional Access, identity governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA, and authentication flows.
• Skills in Microsoft Intune, SCCM, Autopilot, Entra Join, hybrid join, Windows Update for Business, CIS benchmarks, and GPO migration.
• Skills in GSA, Entra Private Access, Entra Internet Access, and Private Application Access.
• Skills in PowerShell, Microsoft Graph, REST APIs, and Azure Automation.
• Ability to take independent technical ownership, mentor others, collaborate cross-functionally, and communicate clearly with technical and non-technical audiences.
• Must be authorized to work for any employer in the United States; Trupanion is unable to sponsor or take over sponsorship of an employment visa.

Responsibilities

• Lead Active Directory dependency reduction initiatives.
• Develop and execute an Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync and lead migration from Entra Connect architecture where appropriate.
• Assess and reduce authentication dependencies; plan and execute ADFS retirement.
• Establish identity source-of-authority governance.
• Lead Microsoft passwordless authentication strategy, including Microsoft Authenticator and Passkeys.
• Design and implement Windows Hello for Business deployment and Cloud Kerberos Trust architecture.
• Develop phishing-resistant authentication standards and authentication lifecycle standards.
• Lead Intune transformation initiatives and design cloud-first endpoint management standards.
• Drive GPO-to-Intune migration programs and implement CIS benchmark controls through Intune.
• Modernize Windows deployment and provisioning services and establish device lifecycle standards.
• Lead Hybrid AD to Entra Join transition strategies and Autopilot modernization initiatives.
• Design deployment and enrollment standards and remove legacy dependencies affecting modern deployments.
• Evaluate Microsoft Global Secure Access and design Entra Private Access and Entra Internet Access architectures.
• Develop coexistence and migration strategies from Zscaler, conduct proof-of-concept testing, and create migration roadmaps and operational support models.
• Evaluate and implement Entra Identity Governance capabilities.
• Design Joiner-Mover-Leaver workflows and automated access certification processes.
• Integrate identity lifecycle management with HR systems and improve role-based access governance and compliance.
• Develop PowerShell automation solutions and use Microsoft Graph APIs.
• Automate provisioning and reporting, reduce operational overhead through engineering practices, and build self-service capabilities for users and support teams.
• Partner with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute the Microsoft platform roadmap.

Benefits

• Monthly bonuses; employees are currently eligible.
• Restricted Stock Unit grants for new team members, vesting over four years.
• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off.
• Nine paid float holidays.
• Five-week sabbatical after five years of employment.
• Casual, pet-friendly office environment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Free on-site gym.
• Free dog-walking services for office pets during business hours.
• Free parking.
• Paid ORCA cards.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed