Systems Engineer, Architecture

About the Role

• Architecture Ownership: Define and maintain the target-state architecture for Shield's internal systems, including identity, endpoint, collaboration, and cloud platforms. Maintain the technology roadmap and sequence changes to get from current state to target state.
• Standards and Governance: Author and enforce technical standards for configuration, security baselines, naming, tenancy, and integration patterns. Serve as the design authority for new tooling and platform changes.
• Identity and Access Design: Own the identity architecture across Entra ID and connected SaaS, including SSO, SCIM provisioning, conditional access, and privileged access models. Design for scale as new entities and users are added.
• Integration Architecture: Design how internal business systems connect, including HRIS-driven provisioning, PSA and ticketing platforms, and automation flows. Set the patterns that engineers implement.
• M&A Integration Design: Assess acquired companies' technology stacks, define migration and consolidation plans for tenants, identity, and endpoints, and establish repeatable integration playbooks.
• Platform Lifecycle Planning: Evaluate emerging platforms and plan the retirement and replacement of legacy systems. Lead proofs of concept and produce decision records with clear rationale and tradeoffs.
• Security Architecture: Partner with IT security to embed Zero Trust principles, device compliance, encryption, MFA, and EDR coverage into platform design rather than bolting them on afterward.
• Documentation: Maintain architecture diagrams, design standards, and decision records so the environment is understandable and supportable by the broader IS&T team.

• Architecture Mindset: Ability to think in systems and lifecycles, weigh tradeoffs, and design for where the organization will be rather than where it is today.
• Microsoft 365 and Entra ID: Deep, design-level experience with M365 tenancy, Exchange, SharePoint, Teams, and Entra ID, including multi-tenant and tenant consolidation scenarios.
• Endpoint Architecture: Expert knowledge of Microsoft Intune and Apple Business Manager, including policy design, compliance frameworks, and zero-touch provisioning for Windows and macOS.
• Identity and Access Management: Strong command of IAM design, including SSO, SAML, OIDC, SCIM, conditional access, and role-based and privileged access models.
• Cloud Infrastructure: Working knowledge of Azure (AWS a plus), including identity integration, networking fundamentals, and how cloud services connect to internal business systems.
• Integration and Automation: Experience designing integrations and automation across SaaS platforms using APIs, iPaaS tools, PowerShell, or Graph API.
• Security Fundamentals: Familiarity with security frameworks and remote-first best practices, including Zero Trust, disk encryption, MFA enforcement, and EDR.
• M&A Experience: Prior exposure to technology due diligence, tenant migrations, or environment consolidation is strongly preferred.
• Communication: Ability to explain architectural decisions to both technical and non-technical stakeholders and to document designs clearly.