Microsoft 365 Architect

Microsoft 365 Architect is a hybrid contract role at Anlage Digital in Bengaluru, Karnataka, India, posted 7 Oct 2026.

Job DescriptionMicrosoft 365 ArchitectExchange Online / Exchange Server hybrid, SharePoint Online, OneDrive, Power Platform, Purview, SendGrid, ExclaimerRole SummaryThe M365 Architect owns the end-to-end design authority for the customer's Microsoft 365 estate across collaboration, messaging, content services, compliance and low-code automation. The role is accountable for architecture decisions, design documentation, standards and governance, and for driving L3 escalations that require design-level intervention. This is a client-facing onsite role that partners with the customer's IT leadership, security and infrastructure teams, and leads the offshore L3 engineering pod.Position DetailsFieldDetailRole TitleMicrosoft 365 ArchitectTowerM365 / Modern Workplace - L3 Design & ArchitectureLocation / ModelOnsite at client locationShiftBusiness hours aligned to CST, with on-call participation for P1/P2 and change windowsExperience12+ years in IT infrastructure, of which 6+ years in Microsoft 365 architecture and migrationsReports ToService Delivery Manager / Tower LeadTeam InterfaceL1/L1.5 Service Desk, L2 Operations, offshore L3 pod, client security, network and identity teamsKey ResponsibilitiesArchitecture and DesignOwn the target-state architecture for Exchange (Online and on-premises hybrid), SharePoint Online, OneDrive for Business, Teams file/collaboration integration, Power Platform and Purview.Produce and maintain HLD/LLD, design decision records, as-built documentation, standards and reference patterns; secure client architecture review board approval.Define tenant configuration baselines, governance guardrails and lifecycle policies for sites, teams, groups, guests and external sharing.Assess and remediate technical debt: legacy Exchange servers, public folders, unsupported clients, orphaned sites, oversized OneDrive estates.Conduct design reviews and provide sign-off on changes classified as high-risk or architecturally significant.Messaging - Exchange and Mail FlowDesign and govern hybrid Exchange topology, mail routing, connectors, Autodiscover, free/busy and cross-forest coexistence.Own mail hygiene and transport architecture: Exchange Online Protection, Defender for Office 365 policies, anti-spam/anti-phish, transport rules, journaling.Design and govern SPF, DKIM and DMARC records and enforcement posture across all sending domains, including third-party senders.Own application/relay mail architecture including SendGrid: domain authentication, dedicated IPs, sub-user and API key model, suppression lists, deliverability and bounce management, IP warm-up and reputation monitoring.Own enterprise email signature and disclaimer management through Exclaimer: template design, AD attribute mapping, campaign banners, rules by department/region, and integration with Exchange Online transport or client-side deployment.Define mailbox provisioning standards, shared/resource mailbox models, retention and archiving (including migration off legacy archive platforms).Content Services - SharePoint and OneDriveArchitect SharePoint Online information architecture: hub/site topology, navigation, metadata, search, content types and term store.Design file-share and legacy SharePoint on-premises migration strategy and tooling (ShareGate, Migration Manager, Mover) including sizing, throttling, cutover and validation.Define OneDrive Known Folder Move, sync client policy, storage quotas, retention on leaver accounts and offboarding data handling.Define permissions model, sharing controls, sensitivity-label driven site protection and access review process.Compliance - Microsoft PurviewDesign and implement sensitivity labels and auto-labelling, DLP policies across Exchange, SharePoint, OneDrive, Teams and endpoints.Design retention labels and policies, records management, litigation hold and eDiscovery (Premium) workflows with Legal and HR.Implement Insider Risk Management, Communication Compliance and Audit (Premium) where in scope; define alert triage and escalation into the service desk.Map control requirements from regulatory and customer security frameworks to Purview configuration and evidence artefacts.Power PlatformDefine Power Platform governance: environment strategy, DLP connector policies, Managed Environments, CoE Starter Kit adoption, licensing and capacity management.Provide design guidance and code/solution review for Power Apps, Power Automate flows and Dataverse usage; establish ALM using solutions and pipelines.Identify and shepherd automation opportunities that reduce service desk and operational ticket volume.Operations, L3 Escalation and GovernanceAct as final technical escalation point for M365 P1/P2 incidents; lead root cause analysis and drive permanent fix through problem management.Chair the M365 CAB input: review and approve RFCs, define rollback plans, validate blast radius.Own Message Center and roadmap change impact assessment; publish a rolling change calendar to the client.Define monitoring, alerting and service health reporting for the M365 estate; establish SLA/KPI measures and report in monthly service reviews.Create and maintain SOPs and knowledge articles; drive shift-left of repeatable L3 tasks to L2 and L1.5.Mentor L2/L3 engineers and act as design authority for project and M&A workstreams (tenant-to-tenant migrations, divestitures, acquisitions).Required Technical SkillsDomainSkillsLevelExchangeExchange Online, Exchange Server 2016/2019 hybrid, HCW, mail flow and transport rules, EOP/Defender for O365, migration (cutover, staged, hybrid, third-party tooling)ExpertEmail AuthenticationSPF, DKIM, DMARC, MTA-STS, TLS enforcement, deliverability troubleshootingExpertSendGridDomain authentication, dedicated IP and warm-up, API/SMTP relay integration, event webhooks, suppression and bounce handlingAdvancedExclaimerExclaimer Cloud for Microsoft 365, signature templates, AD/Entra attribute mapping, rules, server-side vs client-side deploymentAdvancedSharePoint / OneDriveSPO information architecture, hub sites, search, permissions, sync client policy, KFM, SPMT/ShareGate/Migration ManagerExpertPurviewSensitivity and retention labels, DLP, eDiscovery, records management, Insider Risk, AuditAdvancedPower PlatformPower Apps, Power Automate, Dataverse, environment and DLP governance, CoE Kit, ALMAdvancedIdentityEntra ID, Conditional Access, Entra Connect, SSO, app registrations, RBAC and PIMAdvancedAutomationPowerShell (Exchange Online, PnP, MS Graph SDK), Microsoft Graph API, scripted reporting and bulk operationsAdvancedEndpoint / AdjacentIntune policy interaction with M365 apps, Teams (incl. voice awareness), Defender for Endpoint integrationWorkingService ManagementITIL incident, problem, change and request management; ServiceNowAdvancedCertificationsRequired (one or more):MS-102 Microsoft 365 Administrator ExpertMS-203 Microsoft 365 Messaging Administrator AssociatePreferred:SC-400 Information Protection and Compliance AdministratorSC-300 Identity and Access AdministratorPL-600 Power Platform Solution ArchitectMS-700 Teams Administrator, TOGAF or equivalent architecture certificationSoft Skills and BehavioursAble to present and defend architecture decisions to client CIO/CISO and architecture review boards.Strong written communication - design documents, decision records and executive summaries.Comfortable operating in a multi-vendor environment and driving outcomes without direct authority.Bias for standardisation, automation and documentation over tribal knowledge.Critical Success FactorsApproved target-state M365 architecture and design baseline within the first 90 days.Zero unplanned mail flow or collaboration outages arising from design or change defects.Measurable reduction in recurring L3 escalations through problem management and shift-left.Purview control coverage and evidence accepted by the client security and compliance function.Design sign-off cycle time and change success rate meeting agreed SLA/KPI thresholds.Job Descript