Skip to Content
All roles
BK

BLUU KAZI

Cybersecurity, IT and AI talent

Systems Engineer, Architecture

US Remote Full-time

Posted 10/29/2026

Apply for this role →

Role Summary

The Systems Engineer, Architecture owns the long-term design of our client's internal technology environment. Moving beyond day-to-day operations, this role defines what the client's systems will look like in two to five years, setting the standards, roadmap, and reference designs to get there. You will own the architecture of their core platforms—including Microsoft 365, Entra ID, Intune, Azure, and their SaaS ecosystem—ensuring that every new tool, integration, and acquired environment fits a coherent, secure, and scalable design.

Responsibilities

  • Define and maintain the target-state architecture and technology roadmap for internal systems, including identity, endpoint, collaboration, and cloud platforms.

  • Author and enforce technical standards for configuration, security baselines, naming, tenancy, and integration patterns as the primary design authority.

  • Own the identity architecture across Entra ID and connected SaaS, including SSO, SCIM provisioning, conditional access, and privileged access models.

  • Design integration architecture for internal business systems (HRIS, PSA, ticketing) and set automation patterns for engineers to implement.

  • Assess acquired companies' technology stacks to define migration plans, tenant consolidations, and repeatable integration playbooks.

  • Evaluate emerging platforms, lead proofs of concept, and plan the lifecycle retirement of legacy systems with clear decision records.

  • Embed Zero Trust principles, device compliance, encryption, MFA, and EDR coverage directly into platform designs in partnership with IT security.

  • Maintain comprehensive architecture diagrams, design standards, and decision records to ensure the environment is supportable by the broader IS&T team.

Required Skills

  • Systems Architecture
  • Microsoft 365
  • Entra ID
  • Intune
  • Azure
  • Identity and Access Management (IAM)
  • SSO
  • SCIM
  • API Integration
  • Zero Trust
  • PowerShell

Qualifications

  • Proven experience in a systems architecture or senior engineering role, with a strong ability to think in systems, weigh tradeoffs, and design for future scale.
  • Deep, design-level expertise with Microsoft 365 tenancy, Exchange, SharePoint, Teams, and Entra ID (including multi-tenant and consolidation scenarios).
  • Expert knowledge of endpoint architecture via Microsoft Intune and Apple Business Manager (policy design, compliance, zero-touch provisioning).
  • Strong command of IAM design, including SSO, SAML, OIDC, SCIM, conditional access, and role-based access models.
  • Working knowledge of Azure cloud infrastructure, including identity integration, networking fundamentals, and business system connections.
  • Experience designing API and automation workflows across SaaS platforms using iPaaS tools, PowerShell, or Graph API.
  • Strong communication skills with the ability to explain complex architectural decisions to both technical and non-technical stakeholders.

Nice to Have

  • Prior exposure to M&A technology due diligence, tenant migrations, or environment consolidation.
  • Working knowledge of AWS cloud infrastructure.
  • Advanced Microsoft or Cloud architecture certifications.

What We Offer

  • A direct line to the hiring team. BLUU KAZI presents your profile in person, so your application never disappears into a portal.
  • Coaching at every stage. Interview preparation, feedback after each round and support through the offer.
  • Room to grow. Access to BLUU KAZI training and certification paths in cybersecurity, cloud and AI.
  • A bench that works for you. Join our network of emerging and veteran technologists and hear first about roles that fit.

Ready to apply?

Apply for this role →