Platform Architect

It's fun to work in a company where people truly BELIEVE in what they're doing!

Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish by providing their customers with seamless experiences. With a dynamic and growing team of over 1,900 employees, we are committed to driving innovation and delivering best-in-class software and payment solutions that empower small and medium-sized businesses across numerous industries. Our purpose is to help our customers grow their businesses and delight their customers. Join us and be a part of a forward-thinking company that values growth, excellence, and the success of our clients.

Fullsteam’s Enterprise Technology team designs, secures, and operates the Microsoft 365 ecosystem and the identity and access management foundation that connects the organization’s core business systems, including HR, financial, customer relationship management, service management, and reporting platforms. The team delivers scalable, secure, and highly automated solutions that support the company’s growth, digital transformation, and acquisition strategy while providing architectural leadership across the enterprise.

As a Platform Architect for Enterprise Technology, you will lead the architecture and evolution of Fullsteam’s Microsoft 365 Collaboration Platform and enterprise identity ecosystem. You will define technical strategy, establish architectural standards, and design secure, scalable, and highly automated solutions that support enterprise growth.

This role is responsible for identity lifecycle automation, conditional access architecture, Microsoft 365 AI governance, and technical oversight of acquisition onboarding initiatives. Working closely with engineering, security, infrastructure, and business stakeholders, you will ensure enterprise platforms remain secure, resilient, and aligned with organizational objectives while identifying opportunities to leverage emerging cloud and AI technologies.

Primary Responsibilities:

Strategic Architecture

• Design scalable, secure architecture for the Microsoft 365 Collaboration Platform and related enterprise services.

• Establish architectural standards that align with enterprise technology strategy and business objectives.

• Evaluate emerging Microsoft cloud technologies and recommend adoption where appropriate.

Identity & Access Management

• Design and govern enterprise identity architecture using Microsoft Entra, including SSO, SCIM provisioning, lifecycle automation, and role-based access.

• Develop and maintain identity automation processes integrating Workday, ServiceNow, and third-party applications.

• Design conditional access strategies supporting Zero Trust, least privilege, device compliance, and risk-based access controls.

Acquisition Integration

• Provide architectural oversight for onboarding newly acquired companies.

• Participate in credential collection, system discovery, migration planning, and identity integration activities.

• Guide migration teams to ensure consistency with enterprise architecture and security standards.

AI Governance & Microsoft 365

• Design Microsoft 365 Copilot architecture and govern AI experiences grounded in organizational data.

• Define controls that protect sensitive information and reduce AI data oversharing risks.

• Govern third-party and custom AI applications accessing Microsoft 365 data through Microsoft Entra, Microsoft Graph, Copilot Studio, and Microsoft Foundry.

• Establish auditing, retention, eDiscovery, and compliance capabilities supporting AI usage and regulatory requirements.

Infrastructure & Automation

• Provide architectural guidance for DNS and domain management across providers including Cloudflare, GoDaddy, Network Solutions, AWS, and Microsoft 365.

• Design highly automated deployment, provisioning, and operational processes that improve consistency and reduce manual effort.

• Support cloud-native architecture and Infrastructure-as-Code initiatives.

Security & Compliance

• Design enterprise security architecture for Microsoft 365, identity, and collaboration services.

• Ensure solutions comply with applicable regulatory, legal, and corporate security requirements.

• Partner with security and compliance teams to continuously improve governance and platform protection.

Platform Leadership

• Provide architectural direction for Microsoft 365 technologies including Exchange Online, Teams, SharePoint, Power Platform, Purview, and Microsoft Entra.

• Partner with Endpoint Engineering and other infrastructure teams to deliver integrated enterprise solutions.

• Produce architecture standards, technical documentation, and implementation guidance for internal teams and managed service providers.

• Serve as the technical escalation point for complex platform and architectural issues.

Collaboration

• Partner with business and technology stakeholders to translate business requirements into scalable technical solutions.

• Lead cross-functional initiatives that improve enterprise collaboration, security, and operational efficiency.

• Mentor engineers and provide technical leadership across Enterprise Technology initiatives.

Skills & Competencies:

• Enterprise identity architecture using Microsoft Entra, including SSO, MFA, SCIM provisioning, conditional access, and role-based access control.

• Zero Trust architecture, defense-in-depth, least privilege, and secure-by-design principles.

• Microsoft 365 AI governance, including Microsoft 365 Copilot, Microsoft Purview, Microsoft Graph permissions, and AI security controls.

• Microsoft Azure architecture, including Azure PaaS services, Azure App Services, Azure SQL, Azure Kubernetes Service, and Web Application Firewall.

• Infrastructure automation and scripting using PowerShell, Bash/Shell, and/or Python.

• Infrastructure as Code using Bicep, ARM templates, or similar technologies.

• Modern DevOps practices including Git, Jenkins, Visual Studio Code, CI/CD pipelines, and source control strategies.

• API integration and enterprise systems architecture using RESTful services.

• DNS administration across multiple providers.

• Working knowledge of security frameworks such as NIST CSF and PCI DSS.

• Excellent analytical, documentation, communication, and stakeholder management skills.

• Demonstrated ability to lead technical initiatives, influence architectural decisions, and build trusted cross-functional relationships.

Minimum Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Software Engineering, Cyber Security, or a related field. Four or more years of relevant professional experience in cloud engineering, software engineering, or infrastructure automation may substitute for a degree.

• 10+ years of combined education and professional experience in Information Technology or a related discipline.

• Experience designing enterprise Microsoft 365 and Azure architectures.

• Experience with enterprise Identity and Access Management, including Microsoft Entra, SSO, MFA, and lifecycle automation.

• Experience developing cloud-native solutions using scripting, automation, Infrastructure as Code, and modern DevOps practices.

• Experience designing secure enterprise platforms in regulated or security-conscious environments.

• Experience leading enterprise technology initiatives involving platform integration, acquisitions, or large-scale organizational change.

• Excellent written and verbal communication skills with experience producing technical documentation and architecture standards.

Salary range: $125,000 - $155,000 USD

Fullsteam supports an inclusive workplace that values diversity of thought, experience, and background. Fullsteam is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state, or local law.