Lead Technology Architect

Agility is looking for a Lead Technology Architect to serve as the senior-most technical authority for our messaging, collaboration, and identity estate across multiple organizational environments.

This is a hands-on leadership role — you will personally design, build, secure, and operate our platforms while setting technical standards and leading a small team of 1–2 administrators. There is no higher technical authority within the function; you will own critical decisions end-to-end.

The portfolio spans Microsoft Entra ID, Active Directory, Exchange Online/Hybrid, Microsoft Teams and SBC voice, SharePoint/OneDrive, Microsoft Defender, Intune endpoint fleet, certificates, DNS, enterprise AI platforms (Claude + Microsoft Copilot), and a large SSO/application integration portfolio.

• Administer Microsoft Entra ID and on-premises AD across all environments
• Design and maintain Conditional Access, PIM, RBAC, MFA, and SSO (OAuth, OIDC, SAML)
• Own hybrid identity via Entra Connect

• Administer Exchange Online and Exchange Server (hybrid), including DAG, mail flow, and transport rules
• Own email security (gateway, DMARC, DKIM, SPF) and manage mailbox migrations

• Administer Microsoft Teams policies, governance, and SBC-based enterprise voice (dial plans, call queues, PSTN)
• Manage SharePoint Online and OneDrive, including external sharing and Known Folder Move

• Operate Microsoft Defender for Office 365 and Endpoint (EDR, ASR, security baselines)
• Lead incident response and maintain hardening controls aligned to CIS benchmarks

• Manage a mid-to-large multi-country fleet (Windows, macOS, Android, iOS)
• Own Autopilot, compliance/configuration policies, update rings, app packaging, and PowerShell remediation scripts

• Manage full SSL/TLS certificate lifecycle and DNS/CDN/WAF/DDoS platforms
• Own domain governance, registrations, and the web publishing approval workflow

• Administer enterprise AI platforms including Claude integrations and Microsoft Copilot
• Design AI workflows and agents, govern AI access, model organizational data, and manage AI licensing

• Act as technical design authority; maintain standards, runbooks, and documentation
• Lead, mentor, and delegate to a small admin team
• Serve as final escalation point; on-call for critical incidents

• Based in Kuwait or willing to relocate; on-site at Kuwait Head Office
• Eligible to hold Global Administrator / privileged access (enhanced background screening may apply)
• Fluent professional English; Arabic is an advantage
• On-call availability for critical incidents

• Bachelor's degree in Computer Science, IT, Engineering, or related field (Master's preferred)
• Exceptional hands-on experience may be considered in lieu of formal qualifications

• 12–15 years in enterprise IT infrastructure with deep Microsoft stack expertise
• 5–7 years in a senior architect or technical lead role owning M365 environments end-to-end
• Proven hands-on experience with Exchange hybrid, Entra ID/AD, Intune at scale, and Microsoft Defender
• Practical experience with enterprise AI platforms (Claude, Microsoft Copilot), including workflow design and data modeling

• MS-102 — Microsoft 365 Enterprise Administrator Expert
• SC-300 — Identity and Access Administrator Associate
• SC-200 — Security Operations Analyst Associate
• MD-102 — Endpoint Administrator Associate
• MS-700 — Teams Administrator Associate
• AZ-104 — Azure Administrator Associate
• MS-203 — Messaging Administrator Associate (or equivalent)

• Excellent problem-solving skills and attention to detail 
• Effective communication and collaboration skills 
• Ability to work independently and handle multiple tasks 
• Analytical and troubleshooting skills 
• Stakeholder Management
• Technical Leadership & Collaborative Influence
• Operational Excellence & Adaptive Delivery
• Strategic Problem-Solving & Architecture Design
• Fluent professional English; Arabic is an advantage