Microsoft 365 Architect

AFL manufactures industry-leading fiber optic cable, connectivity and accessories and provides engineering and installation services for some of the largest telecom customers in the world. Our company was founded in 1984 with a single fiber optic cable and today, we manufacture thousands of products, generate an excess of $2B in revenue, and employ approximately 11,000 associates worldwide. At AFL, we recognize that our employees are our greatest asset. We hire and train each individual, investing in them to ensure success in their careers. With a commitment to professional development and growth, let us connect you to your next career opportunity. 

What We Offer:

• A hybrid in office schedule for qualifying employees


• Flexible time off policy


• 401K Company match (up to 4% - dollar for dollar)


• Professional development, training, and tuition reimbursement programs


• Excellent medical, dental, vision, and life insurance policy options


• Opportunities for career advancement with an industry leading company! 

We are seeking an experienced Microsoft 365 Domain Architect to own, operate, and continuously improve our enterprise Microsoft cloud environment. This role serves as the technical authority for Microsoft 365, Intune, Entra ID (Azure AD), and the Power Platform, ensuring platform stability, security, scalability, and high user satisfaction.

The ideal candidate combines deep hands-on administration expertise with strong governance and enablement skills. You will manage the full lifecycle of M365 services while empowering business users and citizen developers to safely and effectively leverage low-code tools across the organization. 

After gaining knowledge of our environment, there is the opportunity for this position to work under our Hybrid schedule working both in the office and remotely.  

Key Responsibilities

Microsoft 365 Architecture & Operations

• Serve as the primary administrator for the Microsoft 365 tenants, including Exchange Online, SharePoint Online, OneDrive, Teams, and supporting services


• Manage Microsoft Teams Phone System, including calling policies, dial plans, voice routing, Direct Routing, auto attendants, calling queues, and emergency calling


• Oversee user lifecycle management, licensing, role assignments, permissions, and access controls


• Configure and maintain security, compliance, retention, and data governance policies


• Administer email security gateways (Proofpoint or equivalent), including policy configuration, monitoring, and incident response


• Monitor service health, troubleshoot platform issues, and engage Microsoft support as needed


• Plan and execute tenant-wide configuration changes, feature rollouts, and service optimizations

Endpoint & Intune Management

• Design, implement, and maintain device management strategies using Microsoft Intune


• Manage MDM and MAM policies across Windows, iOS, and Android platforms


• Configure Conditional Access and device compliance policies


• Coordinate with the Tanium team on endpoint management integration and policy enforcement


• Troubleshoot endpoint configuration, enrollment, and compliance issues

Power Platform Administration & Governance

• Administer Power Platform environments, including environment strategy, security roles, and DLP policies


• Manage Power Apps, Power Automate, and Power BI service configurations


• Monitor platform usage, licensing, and capacity


• Establish and enforce governance standards and best practices


• Provide guidance and oversight for citizen developers building Power Platform solutions

Azure & Identity Integration

• Administer Entra ID (Azure Active Directory), including users, groups, enterprise applications, and identity protection


• Configure and maintain hybrid identity solutions using Azure AD Connect


• Implement Privileged Identity Management (PIM) and identity security controls


• Support Azure resources that integrate with Microsoft 365 services


• Assist with Azure provisioning and operational support as required

Development Enablement & Collaboration

• Support and mentor citizen developers using Power Apps and Power Automate


• Review and optimize apps and flows for performance, reliability, and maintainability


• Create reusable templates, components, and solution patterns


• Deliver training sessions and produce technical documentation


• Partner with IT and business stakeholders to translate requirements into scalable platform solutions

Documentation, Reporting & Compliance

• Maintain accurate documentation of platform architecture, configurations, and operational procedures


• Produce reports on platform usage, adoption, security posture, and service performance


• Ensure compliance with internal policies, regulatory requirements, and security standards


• Participate in audits and provide required evidence and documentation

Required Qualifications

Technical Experience

• 10-12 years of enterprise-level Microsoft 365 administration experience


• Strong expertise in Microsoft Intune and endpoint management


• Hands-on experience administering Microsoft Teams Phone System, including Direct Routing


• Experience with email security platforms (Proofpoint preferred; Mimecast, Barracuda acceptable)


• Proven administration of Power Platform (Power Apps, Power Automate, Power BI)


• Strong understanding of Entra ID (Azure AD), authentication, and identity governance


• Experience with PowerShell scripting for M365 and Azure automation


• Knowledge of Microsoft 365 security and compliance features (DLP, retention, sensitivity labels)

Professional Skills

• Bachelor’s degree in Information Technology, Computer Science, or equivalent experience


• Strong analytical, troubleshooting, and organizational skills


• Excellent communication skills with the ability to explain technical concepts to non-technical audiences


• Ability to manage multiple priorities independently in a fast-paced environment

Power Platform Enablement

• Ability to review and troubleshoot Power Apps (canvas and model-driven)


• Understanding of Power Automate design patterns and best practices


• Familiarity with Dataverse, data modeling, and connectors


• Experience supporting or mentoring citizen developers

Preferred Qualifications

• Microsoft certifications such as MS-102, MS-900, PL-200, PL-300, or AZ-104


• Experience with Microsoft Graph API and automation


• Knowledge of SharePoint Online architecture and site design


• Familiarity with SBCs, PSTN connectivity, and Teams telephony infrastructure


• Experience with Teams governance and lifecycle management


• Exposure to Azure Logic Apps, Azure Functions, or related services


• Understanding of networking fundamentals, DNS, and certificate management


• Experience implementing Zero Trust security principles


• Familiarity with ITIL or other IT service management frameworks 

Work Environment

• Office, hybrid, or remote, depending on organizational policy.


• May require occasional after-hours support during critical releases or incidents.