Systems Engineer, Architecture (Microsoft 365/Entra ID)

Location: Onsite in the New York City office; candidates should be located in the greater New York City area and must be available for regular onsite presence.

Salary: $165,000–$190,000 per year

Company

hirify.global is the hiring organization for this internal systems architecture role.

What you will do

• Own the target-state architecture, technology roadmap, standards, and reference designs for internal identity, endpoint, collaboration, cloud, and SaaS platforms.
• Design identity and access architecture across Entra ID and connected SaaS, including SSO, SCIM provisioning, conditional access, and privileged access models.
• Define integration patterns for HRIS provisioning, PSA and ticketing platforms, automation flows, and other internal business systems.
• Assess acquired technology environments and create repeatable tenant, identity, endpoint, migration, and consolidation playbooks.
• Evaluate emerging platforms, lead proofs of concept, plan legacy-system retirement, and document decisions, tradeoffs, diagrams, and standards.
• Embed Zero Trust, device compliance, encryption, MFA, and EDR coverage into platform architecture.

Requirements

• Strong architecture mindset with the ability to evaluate tradeoffs, plan system lifecycles, and design for future organizational needs.
• Deep design-level experience with Microsoft 365 tenancy, Exchange, SharePoint, Teams, and Entra ID, including multi-tenant and tenant-consolidation scenarios.
• Expert knowledge of Microsoft Intune and Apple Business Manager, including policy design, compliance frameworks, and zero-touch provisioning for Windows and macOS.
• Strong IAM design experience with SSO, SAML, OIDC, SCIM, conditional access, and role-based and privileged access models.
• Working knowledge of Azure, including identity integration, networking fundamentals, and connections between cloud services and internal business systems.
• Experience designing SaaS integrations and automation using APIs, iPaaS tools, PowerShell, or Graph API.
• Familiarity with security frameworks and practices including Zero Trust, disk encryption, MFA enforcement, and EDR.
• Ability to explain architectural decisions to technical and non-technical stakeholders and document designs clearly.

Nice to have

• AWS experience.
• Technology due diligence, tenant migrations, or environment-consolidation experience related to M&A.

Culture & Benefits

• Full-time onsite role with regular presence required at the New York City office.
• Responsibility for architecture standards and decisions supporting the broader IS&T team.