Microsoft 365 Architect

AFL manufactures industry-leading fiber optic cable connectivity and accessories and provides engineering and installation services for some of the largest telecom customers in the world. Our company was founded in 1984 with a single fiber optic cable and today we manufacture thousands of products generate an excess of $2B in revenue and employ approximately 11000 associates worldwide. At AFL we recognize that our employees are our greatest asset. We hire and train each individual investing in them to ensure success in their careers. With a commitment to professional development and growth let us connect you to your next career opportunity.

What We Offer:

• A hybrid in office schedule for qualifying employees
• Flexible time off policy
• 401K Company match (up to 4% - dollar for dollar)
• Professional development training and tuition reimbursement programs
• Excellent medical dental vision and life insurance policy options
• Opportunities for career advancement with an industry leading company!

We are seeking an experienced Microsoft 365 Domain Architect to own operate and continuously improve our enterprise Microsoft cloud environment. This role serves as the technical authority for Microsoft 365 Intune Entra ID (Azure AD) and the Power Platform ensuring platform stability security scalability and high user satisfaction.

The ideal candidate combines deep hands-on administration expertise with strong governance and enablement skills. You will manage the full lifecycle of M365 services while empowering business users and citizen developers to safely and effectively leverage low-code tools across the organization.

After gaining knowledge of our environment there is the opportunity for this position to work under our Hybrid schedule working both in the office and remotely.

Key Responsibilities

Microsoft 365 Architecture & Operations

• Serve as the primary administrator for the Microsoft 365 tenants including Exchange Online SharePoint Online OneDrive Teams and supporting services
• Manage Microsoft Teams Phone System including calling policies dial plans voice routing Direct Routing auto attendants calling queues and emergency calling
• Oversee user lifecycle management licensing role assignments permissions and access controls
• Configure and maintain security compliance retention and data governance policies
• Administer email security gateways (Proofpoint or equivalent) including policy configuration monitoring and incident response
• Monitor service health troubleshoot platform issues and engage Microsoft support as needed
• Plan and execute tenant-wide configuration changes feature rollouts and service optimizations

Endpoint & Intune Management

• Design implement and maintain device management strategies using Microsoft Intune
• Manage MDM and MAM policies across Windows iOS and Android platforms
• Configure Conditional Access and device compliance policies
• Coordinate with the Tanium team on endpoint management integration and policy enforcement
• Troubleshoot endpoint configuration enrollment and compliance issues

Power Platform Administration & Governance

• Administer Power Platform environments including environment strategy security roles and DLP policies
• Manage Power Apps Power Automate and Power BI service configurations
• Monitor platform usage licensing and capacity
• Establish and enforce governance standards and best practices
• Provide guidance and oversight for citizen developers building Power Platform solutions

Azure & Identity Integration

• Administer Entra ID (Azure Active Directory) including users groups enterprise applications and identity protection
• Configure and maintain hybrid identity solutions using Azure AD Connect
• Implement Privileged Identity Management (PIM) and identity security controls
• Support Azure resources that integrate with Microsoft 365 services
• Assist with Azure provisioning and operational support as required

Development Enablement & Collaboration

• Support and mentor citizen developers using Power Apps and Power Automate
• Review and optimize apps and flows for performance reliability and maintainability
• Create reusable templates components and solution patterns
• Deliver training sessions and produce technical documentation
• Partner with IT and business stakeholders to translate requirements into scalable platform solutions

Documentation Reporting & Compliance

• Maintain accurate documentation of platform architecture configurations and operational procedures
• Produce reports on platform usage adoption security posture and service performance
• Ensure compliance with internal policies regulatory requirements and security standards
• Participate in audits and provide required evidence and documentation

Required Qualifications

Technical Experience

• 10-12 years of enterprise-level Microsoft 365 administration experience
• Strong expertise in Microsoft Intune and endpoint management
• Hands-on experience administering Microsoft Teams Phone System including Direct Routing
• Experience with email security platforms (Proofpoint preferred; Mimecast Barracuda acceptable)
• Proven administration of Power Platform (Power Apps Power Automate Power BI)
• Strong understanding of Entra ID (Azure AD) authentication and identity governance
• Experience with PowerShell scripting for M365 and Azure automation
• Knowledge of Microsoft 365 security and compliance features (DLP retention sensitivity labels)

Professional Skills

• Bachelors degree in Information Technology Computer Science or equivalent experience
• Strong analytical troubleshooting and organizational skills
• Excellent communication skills with the ability to explain technical concepts to non-technical audiences
• Ability to manage multiple priorities independently in a fast-paced environment

Power Platform Enablement

• Ability to review and troubleshoot Power Apps (canvas and model-driven)
• Understanding of Power Automate design patterns and best practices
• Familiarity with Dataverse data modeling and connectors
• Experience supporting or mentoring citizen developers

Preferred Qualifications

• Microsoft certifications such as MS-102 MS-900 PL-200 PL-300 or AZ-104
• Experience with Microsoft Graph API and automation
• Knowledge of SharePoint Online architecture and site design
• Familiarity with SBCs PSTN connectivity and Teams telephony infrastructure
• Experience with Teams governance and lifecycle management
• Exposure to Azure Logic Apps Azure Functions or related services
• Understanding of networking fundamentals DNS and certificate management
• Experience implementing Zero Trust security principles
• Familiarity with ITIL or other IT service management frameworks

Work Environment

• Office hybrid or remote depending on organizational policy.
• May require occasional after-hours support during critical releases or incidents.

Required Experience:

Staff IC