Systems Engineer, Architecture

Shield

. Define and maintain target-state architecture for identity, endpoint, collaboration, and cloud platforms .

Posted 11/10/2026full-timeNew York City • New York • United StatesMid-LevelSenior💰 $165,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and maintaining target-state architecture for identity and cloud platforms, with a strong focus on IAM design, Microsoft 365 tenancy, and integration of security frameworks. Capable of leading technology migrations and consolidations while effectively communicating architectural decisions to diverse stakeholders.

Highest-signal resume keywords

Microsoft 365 TenancyIAM DesignZero Trust ImplementationSaaS Integration DesignTechnology Due Diligence

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity ArchitectureSSOSCIM ProvisioningConditional AccessMicrosoft IntuneApple Business ManagerAzureAWSPowerShellGraph API

Soft Skills

Systems ThinkingStakeholder CommunicationDocumentation Skills

Tools & Technologies

Microsoft 365ExchangeSharePointTeamsIPaaS Tools

Industry Keywords

Cloud PlatformsM&A IntegrationCompliance FrameworksTenant ConsolidationDevice Compliance

Tech Stack

Tools & technologies

AWSAzureCloudMacOS

About the role

Key responsibilities & impact

Define and maintain target-state architecture for identity, endpoint, collaboration, and cloud platforms
Maintain the technology roadmap and sequence changes from current state to target state
Author and enforce technical standards for configuration, security baselines, naming, tenancy, and integration patterns
Serve as design authority for new tooling and platform changes
Own identity architecture across Entra ID and connected SaaS, including SSO, SCIM provisioning, conditional access, and privileged access models
Design integrations among HRIS-driven provisioning, PSA and ticketing platforms, and automation flows
Assess acquired companies’ technology stacks and define migration and consolidation plans for tenants, identity, and endpoints
Establish repeatable M&A integration playbooks
Evaluate emerging platforms and plan retirement and replacement of legacy systems
Lead proofs of concept and produce decision records documenting rationale and tradeoffs
Partner with IT security to embed Zero Trust, device compliance, encryption, MFA, and EDR into platform design
Maintain architecture diagrams, design standards, and decision records for the IS&T team

Requirements

What you’ll need

Ability to think in systems and lifecycles, weigh tradeoffs, and design for organizational future states
Deep, design-level experience with Microsoft 365 tenancy, Exchange, SharePoint, Teams, and Entra ID
Experience with multi-tenant and tenant consolidation scenarios
Expert knowledge of Microsoft Intune and Apple Business Manager
Knowledge of policy design, compliance frameworks, and zero-touch provisioning for Windows and macOS
Strong command of IAM design, including SSO, SAML, OIDC, SCIM, conditional access, and role-based and privileged access models
Working knowledge of Azure; AWS is a plus
Knowledge of identity integration, networking fundamentals, and cloud-to-business-system connectivity
Experience designing SaaS integrations and automation using APIs, iPaaS tools, PowerShell, or Graph API
Familiarity with Zero Trust, disk encryption, MFA enforcement, and EDR
Prior exposure to technology due diligence, tenant migrations, or environment consolidation is strongly preferred
Ability to explain architectural decisions to technical and non-technical stakeholders and document designs clearly
Candidates should be located in the greater New York City area
Regular onsite presence in the New York City office is required