Solutions & Platform Architect - Microsoft

Trupanion • Seattle, WA

1d • Hybrid

About The Position

The Solutions & Platform Architect – Microsoft serves as Trupanion’s technical authority for Microsoft identity, security, endpoint management, and Zero Trust architecture. The role leads the design, engineering, deployment, and operational maturity of Microsoft Entra ID, Identity Governance, policies, Intune, Windows Autopilot, Defender, Global Secure Access, and Microsoft 365 security/E5 capabilities.

The architect combines hands-on engineering expertise with enterprise architecture experience and leads complex identity transformations, including Active Directory modernization, passwordless authentication, cloud-first endpoint management, and Zero Trust initiatives. The role partners with Technology Operations, Information Security, Infrastructure, Compliance, Service Desk, and business stakeholders to develop and execute Trupanion’s Microsoft platform roadmap.

This position is open to candidates in the Seattle, Washington area. It follows a hybrid schedule, with work in Trupanion’s office at least three days per week, every Tuesday, Wednesday, and Thursday.

Requirements

• 8+ years of Microsoft infrastructure engineering experience.
• 5+ years of Microsoft identity engineering experience.
• 5+ years of Microsoft 365 administration and architecture experience.
• 5+ years of Intune and endpoint engineering experience.
• 3+ years of software, tools, or automation development experience.
• Experience leading enterprise transformation programs.
• Experience designing Zero Trust architecture.
• Experience supporting regulated or compliance-driven environments.
• Skills in Microsoft Entra ID, Conditional Access, identity governance, PIM, Cloud Sync, Entra Connect, ADFS, SSO, MFA, and authentication flows.
• Skills in Microsoft Intune, SCCM, Autopilot, Entra Join, hybrid join, Windows Update for Business, CIS benchmarks, and GPO migration.
• Skills in Global Secure Access, Entra Private Access, Entra Internet Access, and Private Application Access.
• Skills in PowerShell, Microsoft Graph, REST APIs, and Azure Automation.
• Independent technical ownership, mentoring, cross-functional collaboration, and clear communication with technical and non-technical audiences.
• Must be authorized to work for any employer in the U.S.; Trupanion is unable to sponsor or take over sponsorship of an employment visa.

Responsibilities

• Lead Active Directory dependency reduction initiatives and develop an Entra-first identity architecture strategy.
• Design and implement Microsoft Entra Cloud Sync, lead migration from Entra Connect architecture where appropriate, assess and reduce authentication dependencies, and plan and execute ADFS retirement.
• Establish identity source-of-authority governance.
• Lead Microsoft passwordless authentication strategy, including Microsoft Authenticator, Passkeys, and Windows Hello for Business deployment.
• Implement Cloud Kerberos Trust architecture, develop phishing-resistant authentication standards, and establish authentication lifecycle standards.
• Lead Intune transformation initiatives and design cloud-first endpoint management standards.
• Drive GPO-to-Intune migration programs and implement CIS benchmark controls through Intune.
• Modernize Windows deployment and provisioning services and establish device lifecycle standards.
• Lead Hybrid AD to Entra Join transition strategies and architect Autopilot modernization initiatives.
• Design deployment and enrollment standards and remove legacy dependencies that affect modern deployments.
• Evaluate Microsoft Global Secure Access and design Entra Private Access and Entra Internet Access architectures.
• Develop coexistence and migration strategies from Zscaler, conduct proof-of-concept testing, and create migration roadmaps and operational support models.
• Evaluate and implement Entra Identity Governance capabilities; design Joiner-Mover-Leaver workflows and automated access certification processes.
• Integrate identity lifecycle management with HR systems and improve role-based access governance and compliance.
• Develop PowerShell automation solutions, use Microsoft Graph APIs, automate provisioning and reporting, and reduce operational overhead through engineering practices.
• Build self-service capabilities for users and support teams.

Benefits

• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off and nine paid float holidays.
• Five-week sabbatical after five years of employment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Monthly bonuses; employees are currently eligible.
• Restricted Stock Units for new team members, vesting over four years.
• Free on-site gym.
• Free dog walking services for office pets during business hours.
• Free parking.
• Paid ORCA cards.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed