About us:Intuitive.AI is one of the fastest-growing (INC 5000, CRN) Cloud & SDx solution and services companies supporting enterprise customers on a global scale. Intuitive is an "Engineering Company" delivering measurable value and key business outcomes.Intuitive Superpowers:- DataOps & AI/ML- Cloud Native, AppSecOps, DevSecOps- Cloud Migration & Transformation- Cloud FinOps- Cybersecurity (App/Data/Infra) & GRC- SDx & Digital WorkspaceWe are proud to partner with some of the world's leading enterprises and serve 200+ customers across different industry verticals. We have achieved many milestones along the way, including being recognized as a top-10 quick-growth 150 IT company in the Americas by CRN in 2022 and being named one of America's fastest-growing private companies by INC 5000 in 2022. That’s not all! Even CIO Review awarded us as the Most Promising Cloud Migration Company and Artificial Intelligence Solutions Provider in 2022.About the job:Title – M365 ArchitectStart date: ImmediatePosition Type: Full TimeLocation: India (Remote) Must Have skills- Entra ID/Azure Active Directory & Active Directory On-Premises.Microsoft Exchange (online & on premises both).Microsoft SharePoint Online & One Drive.Microsoft Teams.Microsoft Defender (365, Security, Endpoint, Identity, Office apps).Migration Architecture and experience, On-Premises to cloud, cloud to cloud, mergers, demergers, etc.Good/nice to have – Power Apps, Power Automate, Power BI.CoPilot Studio & Agent 365.MECM, SCCM, other MDM Tools.Azure Security.Entra Connect & other Identity Management Tools.3rd Party SAML/SSO integration.Why this role existsEnterprises are no longer buying Microsoft 365 as an email and file-sharing platform. They are buying it as their identity fabric, their security perimeter, their compliance boundary, and now their AI surface — and most of them are three or four architectural decisions away from doing it badly.We need an architect who can walk into a discovery workshop with a CIO, CTO, a CISO, and a sceptical infrastructure lead, and leave with a defensible target-state architecture that all three of them can sign. Someone who designs for the migration and the operating model that follows it.This is a client-facing architecture role, not a back-office design role. You will shape opportunities before they become RFPs, own the technical narrative through the deal, and stay accountable for whether the architecture survives delivery.Our operating principle: “DWE & IAM owns delivery. You architect within established guardrails—and make those guardrails practical, actionable, and fit for purpose.” What you'll ownSolution architectureDesign end-to-end target-state architectures across Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune, Purview, and Defender — including HLD/LLD, integration patterns, and non-functional requirementsArchitect hybrid and coexistence states that clients can live in for 18 months, not just the clean end stateMake and document the hard calls: identity model, tenant strategy,



licensing edition, migration sequencing, what stays on-premises and whyIdentity as the foundationArchitect Entra ID at enterprise scale: Conditional Access design, PIM, ID Protection, Entra ID Governance (entitlement management, access reviews, lifecycle workflows), hybrid sync and federation retirementIntegrate with the client's existing IAM estate — SailPoint, Saviynt, Okta, CyberArk, Ping — rather than pretending it isn't thereDesign Zero Trust access patterns that survive an audit and don't generate a helpdesk queueMigration & modernisationOwn the architecture for complex migrations: on-premises Exchange and SharePoint to cloud, Google Workspace to M365, and tenant-to-tenant work driven by M&A;, divestiture, or carve-outDesign SCCM-to-Intune co-management and endpoint modernisation paths, including Autopilot, Autopatch, and Windows 365 / AVD where they fitSecurity, compliance & data governanceArchitect Defender XDR coverage (Office 365, Endpoint, Identity, Cloud Apps) and the Purview control set: sensitivity labels, DLP, retention, Insider Risk, Communication Compliance, eDiscoveryDesign Copilot readiness properly — oversharing remediation, SharePoint Advanced Management, permission hygiene, restricted search — because Copilot exposes every governance shortcut a client ever tookAI & automationArchitect Microsoft 365 Copilot rollouts and Copilot Studio agent governance, including tenant-level controls, data boundaries, and adoption instrumentationDesign Power Platform solutions where they're the right answer (ITSM, workflow, approvals, low-code front-ends) and say so when they aren'tPre-sales & practice leadershipLead discovery workshops, technical assessments, and current-state gap analyses; convert findings into acosted roadmapBuild POV/POC frameworks, proposals, and solution decks that win on substanceOwn technical scoping, estimation, BOM and licensing optimisation, and the technical sections of RFP/RFI responses and SOWsBuild reusable IP — reference architectures, assessment tooling, accelerators — so the second engagement is faster than the firstMentor engineers and consultants into architects; act as escalation pointon complex deliveryFirst 90 daysDays 1–30 — Absorb the current portfolio and delivery estate. Map our existing reference architectures and find the gaps. Shadow two live client engagements. Form a point of view on where our M365 architecture practice is strong and where it's improvising.Days 31–60 — Take technical ownership of at least one live opportunity end to end. Publish a target-state reference architecture for one core domain (identity, endpoint, or data governance)



that consultants can pick up and use.Days 61–90 — Lead a client discovery workshop solo. Deliver a costed, phased roadmap that survives CISO scrutiny. Have a defensible plan for the practice IP you'll build over the next two quarters. What we'll measureTechnical win rate on opportunities you architectArchitecture quality at handover — how much gets redesigned once delivery starts (target: very little)Reusable IP shipped and adopted by delivery teamsClient CSAT and the number of engagements that expand rather than endEngineers you've levelled upMust-havesDepth (you've designed and defended these, not just read the docs)Entra ID — Conditional Access, PIM, ID Protection, Governance, hybrid identity and Connect/Cloud SyncExchange Online including hybrid mail flow and migration; SharePoint Online and OneDrive at scaleTeams — collaboration and voice (Direct Routing, Operator Connect, Teams Phone, Rooms)Intune — MDM/MAM, Autopilot, co-management with Configuration Manager, compliance and configuration baselinesMicrosoft Defender XDR suite and Microsoft PurviewMicrosoft Graph, PowerShell automation, and M365 tenant governance and licensing economics (E3/E5/F-SKU trade-offs)BreadthWorking knowledge of Azure landing zones, networking, and how M365 identity intersects with Azure workloadsComfort with third-party IAM, MDM, and security tooling in a heterogeneous estateThe part that's harder to hire forYou can hold a room of senior stakeholders and translate architecture into business consequence and costYou write clearly — architecture documents, proposals, and decks that don't need rewritingYou take a position, show your reasoning, and change your mind when the evidence changesYou're direct about risk with clients, early, in writingCertifications — at least two of: SC-100, SC-300, MS-102, MD-102, SC-400, MS-700, AZ-305. Expired certs and current knowledge beat current certs and stale knowledge; we'll ask questions that tell us which you have.Nice-to-havesExperience inside a Microsoft partner or SI — co-sell motions, Partner Center, funding programmes (CSI, ECIF), advanced specialisationsGoogle Workspace or Okta migration experienceRegulated-industry exposure — BFSI, healthcare, pharma — and data residency workInfrastructure-as-code for the Microsoft cloud (Bicep, Terraform)TOGAF or equivalent architecture framework groundingThis role is probably not for you ifYou want to architect from a distance and hand documents over the wallYou need a fully-formed brief before you can startYou'd rather not be in front of clientsYou architect to the product roadmap instead of to the client's constraintsWhat we offerArchitectural authority — you own the technical decisions, not a committeeEnterprise clients with genuinely hard problems, across the full Microsoft cloud surfaceA practice being built now, with room to shape how it worksCertification and lab funding, Microsoft partner enablement, and direct access to product teams

📌 Architect (India)
🏢 Intuitive.ai
📍 India