Systems Engineer, Architecture

Shield • New York, NY

2d • $165,000 - $190,000 • Onsite

About The Position

The Systems Engineer, Architecture owns the long-term design of Shield’s internal technology environment, defining what its systems should look like over a two-to-five-year horizon and establishing the standards, roadmap, and reference designs to achieve that target state. The role owns the architecture of core platforms—including Microsoft 365, Entra ID, Intune, Azure, and the SaaS ecosystem—and ensures that new tools, integrations, and acquired environments fit a coherent, secure, and scalable design. The position requires working onsite in Shield’s New York City office.

Requirements

• Ability to think in systems and lifecycles, weigh tradeoffs, and design for the organization’s future needs.
• Deep, design-level experience with Microsoft 365 tenancy, Exchange, SharePoint, Teams, and Entra ID, including multi-tenant and tenant consolidation scenarios.
• Expert knowledge of Microsoft Intune and Apple Business Manager, including policy design, compliance frameworks, and zero-touch provisioning for Windows and macOS.
• Strong command of IAM design, including SSO, SAML, OIDC, SCIM, conditional access, and role-based and privileged access models.
• Working knowledge of Azure, including identity integration, networking fundamentals, and connections between cloud services and internal business systems.
• Experience designing integrations and automation across SaaS platforms using APIs, iPaaS tools, PowerShell, or Graph API.
• Familiarity with security frameworks and remote-first best practices, including Zero Trust, disk encryption, MFA enforcement, and EDR.
• Ability to explain architectural decisions to technical and non-technical stakeholders and document designs clearly.

Nice To Haves

• AWS knowledge is a plus.
• Prior exposure to technology due diligence, tenant migrations, or environment consolidation is strongly preferred.

Responsibilities

• Define and maintain target-state architecture for internal identity, endpoint, collaboration, and cloud systems, and maintain the technology roadmap and sequence of changes.
• Author and enforce technical standards for configuration, security baselines, naming, tenancy, and integration patterns; serve as design authority for new tools and platform changes.
• Own identity architecture across Entra ID and connected SaaS, including SSO, SCIM provisioning, conditional access, and privileged access models.
• Design integration patterns for internal business systems, including HRIS-driven provisioning, PSA and ticketing platforms, and automation flows.
• Assess acquired companies’ technology stacks, define migration and consolidation plans for tenants, identity, and endpoints, and establish repeatable integration playbooks.
• Evaluate emerging platforms, plan retirement and replacement of legacy systems, lead proofs of concept, and produce decision records explaining rationale and tradeoffs.
• Partner with IT security to incorporate Zero Trust principles, device compliance, encryption, MFA, and EDR coverage into platform design.
• Maintain architecture diagrams, design standards, and decision records for the broader IS&T team.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed