Lead Technology Architect
Pubblicato il 01-09-2026 - Agility in Italia
DescriptionJob SummaryAgility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1–2 administrators. There is no higher technical authority within the function; you will own critical decisions end-to-end.The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online/Hybrid, Microsoft Teams and SBC voice, SharePoint/OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude + Microsoft Copilot), and a large SSO/application integration portfolio.Your ResponsibilitiesIdentity & Access ManagementAdminister Microsoft Entra ID and on-premises AD across all environmentsDesign and maintain Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC,
SAML)Own hybrid identity via Entra ConnectMessaging & EmailAdminister Exchange Online and Exchange Server (hybrid), including DAG, mail flow, and transport rulesOwn email security (gateway, DMARC, DKIM, SPF) and manage mailbox migrationsCollaboration & VoiceAdminister Microsoft Teams policies, governance, and SBC-based enterprise voice (dial plans, call queues, PSTN)Manage SharePoint Online and OneDrive, including external sharing and Known Folder MoveSecurity & Threat ProtectionOperate Microsoft Defender for Office 365 and Endpoint (EDR, ASR, security baselines)Lead incident response and maintain hardening controls aligned to CIS benchmarksEndpoint Management (Intune)Manage a mid-to-large multi-country fleet (Windows, macOS, Android, iOS)Own Autopilot, compliance/configuration policies, update rings, app packaging, and PowerShell remediation scriptsCertificates, DNS & Web PublishingManage full SSL/TLS certificate lifecycle and DNS/CDN/WAF/DDoS platformsOwn domain governance,