Lead Technology Architect

Role Overview

Lead Technology Architect at Agility, based in Kuwait. This is a hands-on senior technical leadership role serving as the organization's highest technical authority for messaging, collaboration, and identity infrastructure across multiple environments.

Role Purpose

Design, build, secure, and operate critical Microsoft 365 and identity platforms while setting technical standards, leading a small team of 1–2 administrators, and owning all end-to-end technical decisions within the function.

Key Responsibilities

Identity & Access Management

• Administer Microsoft Entra ID and on-premises Active Directory across all environments.
• Design and maintain Conditional Access, Privileged Identity Management (PIM), Role-Based Access Control (RBAC), multi-factor authentication (MFA), and single sign-on (SSO) using OAuth, OIDC, and SAML.
• Own hybrid identity via Entra Connect.

Messaging & Email

• Administer Exchange Online and Exchange Server in hybrid configurations, including Database Availability Groups (DAG), mail flow, and transport rules.
• Own email security including gateway, DMARC, DKIM, and SPF.
• Manage mailbox migrations.

Collaboration & Voice

• Administer Microsoft Teams policies and governance.
• Operate Session Border Controller (SBC)-based enterprise voice including dial plans, call queues, and PSTN.
• Manage SharePoint Online and OneDrive, including external sharing and Known Folder Move.

Security & Threat Protection

• Operate Microsoft Defender for Office 365 and Endpoint, including Endpoint Detection and Response (EDR) and Attack Surface Reduction (ASR).
• Lead incident response.
• Maintain hardening controls aligned to Center for Internet Security (CIS) benchmarks.

Endpoint Management

• Manage a mid-to-large multi-country fleet on Windows, macOS, Android, and iOS.
• Own Windows Autopilot, compliance and configuration policies, update rings, and app packaging.
• Develop PowerShell remediation scripts.

Certificates, DNS & Web Publishing

• Manage full Secure Sockets Layer (SSL) / Transport Layer Security (TLS) certificate lifecycle.
• Operate DNS, Content Delivery Network (CDN), Web Application Firewall (WAF), and Distributed Denial of Service (DDoS) platforms.
• Own domain governance, registrations, and web publishing approval workflows.

Artificial Intelligence

• Administer enterprise AI platforms including Claude integrations and Microsoft Copilot.
• Design AI workflows and agents.
• Govern AI access, model organizational data, and manage AI licensing.

Architecture, Governance & Leadership

• Serve as technical design authority and maintain standards, runbooks, and documentation.
• Lead, mentor, and delegate to a small administrator team.
• Serve as final escalation point and on-call for critical incidents.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (Master's degree preferred).
• Exceptional hands-on experience may be considered in lieu of formal qualifications.
• 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise.
• 5–7 years in a senior architect or technical lead role owning Microsoft 365 environments end-to-end.
• Proven hands-on experience with Exchange hybrid, Entra ID and Active Directory, Intune at scale, and Microsoft Defender.
• Practical experience with enterprise AI platforms including Claude and Microsoft Copilot, including workflow design and data modeling.

Skills & Competencies

• Excellent problem-solving skills and attention to detail.
• Effective communication and collaboration skills.
• Ability to work independently and handle multiple tasks simultaneously.
• Analytical and troubleshooting skills.
• Stakeholder Management.
• Technical Leadership and Collaborative Influence.
• Operational Excellence and Adaptive Delivery.
• Strategic Problem-Solving and Architecture Design.
• Fluent professional English; Arabic is an advantage.

Additional Information

Required Certifications

Candidates should hold several of the following

• MS-102 — Microsoft 365 Enterprise Administrator Expert
• SC-300 — Identity and Access Administrator Associate
• SC-200 — Security Operations Analyst Associate
• MD-102 — Endpoint Administrator Associate
• MS-700 — Teams Administrator Associate
• AZ-104 — Azure Administrator Associate
• MS-203 — Messaging Administrator Associate or equivalent

Location & Eligibility

• Based in Kuwait or willing to relocate; on-site at Kuwait Head Office.
• Eligible to hold Global Administrator and privileged access (enhanced background screening may apply).
• Fluent professional English; Arabic is an advantage.
• On-call availability for critical incidents.