Lead Technology Architect
AI Summary
Job SummaryAgility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1–2 administrators.
About this role
Job Summary
Agility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.
This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1–2 administrators. There is no higher technical authority within the function; you will own critical decisions end-to-end.
The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online/Hybrid, Microsoft Teams and SBC voice, SharePoint/OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude + Microsoft Copilot), and a large SSO/application integration portfolio.
Your Responsibilities
Identity & Access Management
- Administer Microsoft Entra ID and on-premises AD across all environments
- Design and maintain Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC, SAML)
- Own hybrid identity via Entra Connect
Messaging & Email
- Administer Exchange Online and Exchange Server (hybrid), including DAG, mail flow, and transport rules
- Own email security (gateway, DMARC, DKIM, SPF) and manage mailbox migrations
Collaboration & Voice
- Administer Microsoft Teams policies, governance, and SBC-based enterprise voice (dial plans, call queues, PSTN)
- Manage SharePoint Online and OneDrive, including external sharing and Known Folder Move
Security & Threat Protection
- Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR, security baselines)
- Lead incident response and maintain hardening controls aligned to CIS benchmarks
Endpoint Management (Intune)
- Manage a mid-to-large multi-country fleet (Windows, macOS, Android, iOS)
- Own Autopilot, compliance/configuration policies, update rings, app packaging, and PowerShell remediation scripts
Certificates, DNS & Web Publishing
- Manage full SSL/TLS certificate lifecycle and DNS/CDN/WAF/DDoS platforms
- Own domain governance, registrations, and the web publishing approval workflow
Artificial Intelligence
- Administer enterprise AI platforms including Claude integrations and Microsoft Copilot
- Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing
Architecture, Governance & Leadership
- Act as technical design authority; maintain standards, runbooks, and documentation
- Lead, mentor, and delegate to a small admin team
- Serve as final escalation point; on-call for critical incidents
Requirements
Your Qualifications
Education
- Bachelor's degree in Computer Science, IT, Engineering, or related field (Master's preferred)
- Exceptional hands-on experience may be considered in lieu of formal qualifications
Experience
- 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise
- 5–7 years in a senior architect or technical lead role owning M365 environments end-to-end
- Proven hands-on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender
- Practical experience with enterprise AI platforms (Claude, Microsoft Copilot), including workflow design and data modeling
Certifications (Required/Strongly Preferred — candidates should hold several)
- MS-102 — Microsoft 365 Enterprise Administrator Expert
- SC-300 — Identity and Access Administrator Associate
- SC-200 — Security Operations Analyst Associate
- MD-102 — Endpoint Administrator Associate
- MS-700 — Teams Administrator Associate
- AZ-104 — Azure Administrator Associate
- MS-203 — Messaging Administrator Associate (or equivalent)
Other Requirements
- Based in Kuwait or willing to relocate; on-site at Kuwait Head Office
- Eligible to hold Global Administrator / privileged access (enhanced background screening may apply)
- Fluent professional English; Arabic is an advantage
- On-call availability for critical incidents
Your Proficiencies
- Excellent problem-solving skills and attention to detail
- Effective communication and collaboration skills
- Ability to work independently and handle multiple tasks
- Analytical and troubleshooting skills
- Stakeholder Management
- Technical Leadership & Collaborative Influence
- Operational Excellence & Adaptive Delivery
- Strategic Problem-Solving & Architecture Design
- Fluent professional English; Arabic is an advantage