IT Architect

Job Title: IT Architect

Job Description The incumbent of the role is expected to design, develop, and maintain enterprise identity and infrastructure management platforms serving distributed IT administrators across global campuses. Serves as technical architect for hybrid and cloud-first identity, authentication, and device lifecycle systems, bridging legacy on-premises infrastructure with modern cloud services. Architects integrations between on-premises Active Directory, Entra ID, and Microsoft Graph API to support centralized administration of identity, access control, and endpoint management at enterprise scale. Translates complex operational requirements into scalable, maintainable tooling and automation. Evaluates cost and implementation timelines for new infrastructure solutions and thoroughly documents changes, architectural decisions, and system functionality. Responds to security incidents affecting infrastructure systems and mitigates vulnerabilities across identity and authentication services.

Education and Experience

• Bachelor’s degree or 4 years of experience in computing technology or equivalent combination of experience and education.
• Experience in integration of on-premises and cloud-based computing infrastructures.

Skills and Knowledge

• Experience architecting enterprise management platforms and automation tooling
• Proficiency in PowerShell and C#/.NET for systems development and integration
• Experience with DevOps practices: version control, CI/CD, and infrastructure as code
• Deep knowledge of Entra ID, Conditional Access, and Microsoft Graph API
• Experience with smartcard/PIV, FIDO2/passkeys, and certificate-based authentication
• Experience with PKI, certificate lifecycle management, and trust chain administration
• Experience with Intune and Autopilot endpoint management
• ETL experience with logging formats and reporting tools including Splunk
• Experience with cybersecurity best practices including access control, least privilege, and incident response
• Microsoft 365 administration and cloud service integration
• Ability to convey complex technical information to technical and non-technical audiences, orally and in writing
• Working knowledge of AI-driven decision support tools and their potential to streamline and improve business processes. Ability to identify opportunities where AI solutions can reduce manual effort and support data-driven decision making. Familiarity with AI assistants (such as Anthropic’s Claude, Microsoft Copilot, ChatGPT, or similar tools) and a willingness to apply them in functional analysis and documentation activities

Responsibilities

• Platform Architecture and Development: Design, develop, and maintain enterprise CLI tooling and automation platforms for identity and infrastructure management operations using C#/.NET and PowerShell. Architect and implement integrations with Microsoft Graph API and related cloud service APIs. Define and maintain platform architecture including module structure, authentication flows, permission models, and extensibility patterns. Manage full software development lifecycle including version control, testing, deployment, and documentation for tools used by distributed IT administrators across multiple campuses.

• Identity and Access Management Architecture: Architect and administer Entra ID tenant infrastructure including device lifecycle management, Conditional Access policies, access packages, and hybrid identity synchronization. Design and implement tiered permission models supporting principle of least privilege across distributed administrative teams. Plan and execute migration strategies for transitioning on-premises Active Directory services to cloud-native identity solutions while maintaining operational continuity.

• Authentication Infrastructure: Design and maintain enterprise authentication systems including smartcard/PIV enrollment and lifecycle, FIDO2/passkey deployment, and certificate-based authentication. Manage PKI trust chains and certificate lifecycle processes for enterprise authentication services. Troubleshoot complex multi-layer authentication flows spanning network, certificate, and identity provider components.

• Device Lifecycle and Endpoint Management: Architect and support Autopilot and Intune-based device provisioning and management pipelines. Design and implement automated device lifecycle operations including enrollment, compliance monitoring, baseline configuration, and decommissioning at scale. Develop and maintain fleet-wide remediation and hygiene automation for endpoint and device object management.

• Security and Incident Response: Evaluate security risks to infrastructure systems including identity, authentication, and endpoint management services, and recommend architectural mitigations. Participate in incident response for infrastructure-layer security events. Assess vendor and third-party access requests for appropriate scope, delegation model, and compliance with security standards.

• Physical Requirements

• Not Applicable

• Tools/Equipment

• Not Applicable

• About Syracuse University

• Syracuse University is a private, international research university with distinctive academics, diversely unique offerings, and an undeniable spirit. Located in the geographic heart of New York State, with a global footprint, and over 150 years of history, Syracuse University offers a quintessential college experience.

• The scope of Syracuse University is a testament to its strengths: a pioneering history dating back to 1870; a choice of more than 200 majors, 100 minors, and 200 advanced degree programs offered across the University’s 13 schools and colleges; over 15,000 undergraduates and over 6,000 graduate students; more than a quarter of a million alumni in 160 countries; and a student population from all 50 U.S. states and 123 countries.

• About the Syracuse area

• Syracuse is a medium-sized city situated in the geographic center of New York State approximately 250 miles northwest of New York City. The metro-area population totals approximately 500,000. The area offers a low cost of living and provides many social, cultural, and recreational options, including parks, museums, festivals, professional regional theater, and premier shopping venues. Syracuse and Central New York present a wide range of seasonal recreation and attractions ranging from water skiing and snow skiing, hiking in the Adirondacks, touring the historic sites, visiting wineries along the Finger Lakes, and biking on trails along the Erie Canal.

• EEO Statement

• Syracuse University is an equal-opportunity institution. The University prohibits discrimination and harassment based on race, color, creed, religion, sex, gender, national origin, citizenship, ethnicity, marital status, age, disability, sexual orientation, gender identity and gender expression, veteran status, or any other status protected by applicable law to the extent prohibited by law. This nondiscrimination policy covers admissions, employment, and access to and treatment in University programs, services, and activities.

• Commitment to Supporting and Hiring Veterans

• Syracuse University has a long history of engaging veterans and the military-connected community through its educational programs, community outreach, and employment programs. After World War II, Syracuse University welcomed more than 10,000 returning veterans to our campus, and those veterans lit