Senior Solutions Architect

You will join a small group of highly experienced engineers as one of the senior architects on the team. This is a deeply technical and high-impact role focused on designing secure, scalable, and compliant environments for clients.

You will be responsible for evaluating complex infrastructures, defining architectural strategies, leading migrations, and supporting high-level technical escalations. This is not an implementation role — your value lies in decision-making, system design, and solving complex problems beyond standard procedures.

Key Responsibilities

Conduct technical assessments and gap analyses across client environments (networks, identity, M365, Azure, AWS, endpoints, and security posture)

Design remediation plans and upgrade roadmaps based on risk prioritization and business impact

Lead end-to-end migration initiatives: discovery, architecture design, coordination, execution, and stabilization

Architect AWS and Azure environments, including multi-account strategies, networking, identity, and security baselines

Strengthen Active Directory environments (tiered administration models, privileged access management, GPO reviews, legacy protocol remediation, attack path reduction)

Enhance Microsoft 365 security (Entra ID Conditional Access, Identity Protection, Defender suite, Exchange Online security, Purview, Intune baselines)

Translate security and compliance frameworks (NIST CSF, NIST 800-53/171, CMMC, HIPAA, SOC 2, ISO 27001, PCI DSS, CIS Controls) into actionable technical implementations

Act as a senior escalation point for MSP, MSSP, and Incident Response teams

Support incident response engagements with deep expertise in identity, architecture, and forensic analysis

Apply an engineering mindset to improve efficiency through automation, scripting, and tooling where applicable

Requirements

7+ years of experience in senior IT architecture, infrastructure engineering, cloud, or DevOps/SRE roles

Proven experience working in MSP, MSSP, or Incident Response environments

Deep understanding of networking at the protocol level (not just configuration)

Hands-on experience architecting solutions in both AWS and Azure

Strong expertise in Active Directory hardening, permissions modeling, and legacy system remediation

Extensive experience with Microsoft 365 security (Entra ID, Exchange Online, SharePoint, Defender, Purview, Intune)

Solid background in security and compliance frameworks, with the ability to translate them into technical controls

Working knowledge of SIEM platforms (e.g., Sentinel, Splunk, Elastic) for architecture and troubleshooting

Working knowledge of EDR/AV tools (e.g., CrowdStrike, SentinelOne, Defender for Endpoint)

Experience with RMM and PSA tools (e.g., ConnectWise, NinjaRMM, Datto, Kaseya, HaloPSA)

Real-world incident response experience (not only simulations)

Strong scripting and automation skills (Python, PowerShell, Bash, Terraform, etc.)

Excellent written and spoken English

Nice to Have

Experience with AI / LLM-based tools

AWS or Azure certifications (Solutions Architect Professional, Security Specialty)

Security certifications (CISSP, OSCP, GCIH, GCIA, GCFA)

Experience in managed IT environments

Logistics

100% remote (global, with reliable internet)

Full-time position

Flexible schedule, with expected availability during critical incidents