Job description
Exchange Online Exchange Server hybrid SharePoint Online OneDrive Power Platform Purview SendGrid Exclaimer
Role Summary
The M365 Architect owns the endtoend design authority for the customers Microsoft 365 estate across collaboration messaging content services compliance and lowcode automation The role is accountable for architecture decisions design documentation standards and governance and for driving L3 escalations that require designlevel intervention This is a clientfacing onsite role that partners with the customers IT leadership security and infrastructure teams and leads the offshore L3 engineering pod
Position Details
Field Detail
TowerM365 Modern Workplace L3 Design Architecture
Location Model Onsite at client location
Shift - Business hours aligned to CST with oncall participation for P1P2 and change windows
Experience12 years in IT infrastructure of which 6 years in Microsoft 365 architecture and migrations
Reports To Service Delivery Manager Tower Lead
Team InterfaceL1L15 Service Desk L2 Operations offshore L3 pod client security network and identity teams
Key Responsibilities
Architecture and Design
- Own the targetstate architecture for Exchange Online and onpremises hybrid SharePoint Online OneDrive for Business Teams filecollaboration integration Power Platform and Purview
- Produce and maintain HLDLLD design decision records asbuilt documentation standards and reference patterns secure client architecture review board approval
- Define tenant configuration baselines governance guardrails and lifecycle policies for sites teams groups guests and external sharing
- Assess and remediate technical debt legacy Exchange servers public folders unsupported clients orphaned sites oversized OneDrive estates
- Conduct design reviews and provide signoff on changes classified as highrisk or architecturally significant
Messaging Exchange and Mail Flow
- Design and govern hybrid Exchange topology mail routing connectors Autodiscover freebusy and crossforest coexistence
- Own mail hygiene and transport architecture Exchange Online Protection Defender for Office 365 policies antispamantiphish transport rules journaling
- Design and govern SPF DKIM and DMARC records and enforcement posture across all sending domains including thirdparty senders
- Own applicationrelay mail architecture including SendGrid domain authentication dedicated IPs subuser and API key model suppression lists deliverability and bounce management IP warmup and reputation monitoring
- Own enterprise email signature and disclaimer management through Exclaimer template design AD attribute mapping campaign banners rules by departmentregion and integration with Exchange Online transport or clientside deployment
- Define mailbox provisioning standards sharedresource mailbox models retention and archiving including migration off legacy archive platforms
Content Services SharePoint and OneDrive
- Architect SharePoint Online information architecture hubsite topology navigation metadata search content types and term store
- Design fileshare and legacy SharePoint onpremises migration strategy and tooling ShareGate Migration Manager Mover including sizing throttling cutover and validation
- Define OneDrive Known Folder Move sync client policy storage quotas retention on leaver accounts and offboarding data handling
- Define permissions model sharing controls sensitivitylabel driven site protection and access review process
Compliance Microsoft Purview
- Design and implement sensitivity labels and autolabelling DLP policies across Exchange SharePoint OneDrive Teams and endpoints
- Design retention labels and policies records management litigation hold and eDiscovery Premium workflows with Legal and HR
- Implement Insider Risk Management Communication Compliance and Audit Premium where in scope define triage and escalation into the service desk
- Map control requirements from regulatory and customer security frameworks to Purview configuration and evidence artefacts
Power Platform
- Define Power Platform governance environment strategy DLP connector policies Managed Environments CoE Starter Kit adoption licensing and capacity management
- Provide design guidance and codesolution review for Power Apps Power Automate flows and Dataverse usage establish ALM using solutions and pipelines
- Identify and shepherd automation opportunities that reduce service desk and operational ticket volume
Operations L3 Escalation and Governance
- Act as final technical escalation point for M365 P1P2 incidents lead root cause analysis and drive permanent fix through problem management
- Chair the M365 CAB input review and approve RFCs define rollback plans validate blast radius
- Own Message Center and roadmap change i
Skills
Mandatory Skills : M365 Suites of Products