About the position
ENVIRONMENT:
Our client is seeking a hands-on Microsoft Modern Workplace Architect to design and implement a new Microsoft environment from the ground up for a multi-site hotel project. The Architect will take ownership of the end-to-end technical design across identity, endpoint management, Windows infrastructure, security and site networking, creating a secure and repeatable blueprint that can be rolled out across multiple smaller hotel sites.
This is a greenfield project requiring someone who can operate at architecture level while remaining technically hands-on throughout implementation.
DUTIES:
- Architect and establish Microsoft Entra ID from the ground up, including tenant design, Conditional Access, federation, authentication and identity security.
- Define appropriate cloud-only and hybrid identity models.
- Architect and implement Microsoft Intune and Windows Autopilot within a live production environment.
- Design the Windows infrastructure approach using Windows Server 2019–2025 and Hyper-V, where required.
- Design an environment that minimises or removes dependency on traditional Active Directory and domain controllers.
- Identify application, authentication, DNS, device and infrastructure dependencies that could impact a cloud-first/domainless environment.
- Develop repeatable deployment and configuration processes using PowerShell and Microsoft Graph.
- Define site networking requirements covering VLANs, firewall rules, VPNs, DHCP and DNS.
- Establish security, access and endpoint-management standards across sites.
- Create a standardised Modern Workplace blueprint that can be replicated across future hotel locations.
- Produce architecture diagrams, technical documentation, configuration standards and implementation procedures.
- Remain hands-on during implementation, testing and troubleshooting.
- Collaborate with project stakeholders, vendors and other technical partners.
REQUIREMENTS:
- Strong architecture-level experience with Microsoft Entra ID, including greenfield tenant design.
- Proven production experience with Microsoft Intune and Windows Autopilot.
- Strong understanding of Active Directory, Entra ID, hybrid identity and cloud-only identity architectures.
- Experience designing cloud-first or domainless Microsoft environments.
- Strong knowledge of Windows Server 2019–2025 and Hyper-V.
- Strong PowerShell scripting and Microsoft Graph experience.
- Solid networking knowledge covering VLANs, firewalls, VPNs, DHCP and DNS.
- Previous experience designing and implementing Microsoft environments from scratch.
- Ability to translate high-level architecture into practical, hands-on implementation.
- Strong documentation, problem-solving and stakeholder communication skills.
Desired Skills:
- Microsoft
- Modern
- Workplace
