Domain Architect

PenFed is hiring a (Hybrid) Domain Architect at our Tysons, Virginia location.  The primary purpose of this role is to define and lead the enterprise strategy, architecture, governance, and modernization of digital workplace technologies. Serving as the senior technical authority for Microsoft 365, endpoint management, cloud identity, collaboration, security, automation, and enterprise AI services, this role translates business priorities and risk requirements into secure, scalable, and supportable solutions. The architect will establish standards and roadmaps, guide complex transformation initiatives, and partner across Technology, Information Security, Risk, and business teams to improve employee productivity while meeting operational, regulatory, and compliance obligations.

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. This is not intended to be an all-inclusive list of job duties, and the position will perform other duties as assigned.

• Own the target-state architecture, multiyear roadmaps, technical standards, reference patterns, and governance frameworks for digital workplace platforms and services.
• Lead architecture and solution design for Microsoft 365, Microsoft Teams, SharePoint Online, OneDrive for Business, Exchange Online, Power Platform, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Windows, and related collaboration, endpoint, identity, and security capabilities.
• Define and govern enterprise AI capabilities, including Microsoft Copilot, GitHub Copilot, ChatGPT, Claude, and agentic AI solutions, with appropriate controls for data protection, lifecycle management, responsible use, and regulatory compliance.
• Develop modernization strategies for workplace technologies, identity services, endpoint platforms, automation, and AI-enabled employee experiences.
• Design secure, scalable, resilient, and supportable solutions aligned with Zero Trust, cloud-first, least-privilege, data-protection, and operational-resilience principles.
• Translate business, security, risk, compliance, and operational requirements into architecture decisions, solution designs, implementation patterns, and measurable outcomes.
• Lead technical discovery, options analysis, proofs of concept, product evaluations, and architecture reviews for new and emerging technologies.
• Provide technical leadership for complex migrations, integrations, platform consolidations, and enterprise transformation programs from planning through transition to operations.
• Partner with Infrastructure, Security, Information Risk, Enterprise Architecture, application teams, service owners, and business stakeholders to resolve cross-domain dependencies and delivery risks.
• Produce and maintain architecture documentation, decision records, reference designs, technical standards, security patterns, and implementation guidance.
• Establish architecture guardrails and review solution conformance, exceptions, technical debt, platform health, adoption, and lifecycle risks.
• Provide technical direction to engineering teams and vendors, mentor senior engineers, and communicate recommendations and tradeoffs to technical and executive audiences.

Equivalent combination of education and experience is considered.

• Bachelor’s degree in information technology, computer science, engineering, or a related field.
• At least 10 years of progressive enterprise technology experience, including five or more years in architecture, engineering, or senior technical leadership roles.
• Deep expertise across Microsoft 365, including Microsoft Teams, SharePoint Online, OneDrive for Business, Exchange Online, Microsoft Purview, Power Platform, Microsoft Entra ID, Microsoft Intune, Windows Autopilot, and Microsoft Copilot.
• Demonstrated experience developing enterprise architecture strategies, capability roadmaps, standards, reference architectures, decision records, and governance processes.
• Extensive experience designing and governing enterprise collaboration, productivity, endpoint, identity, information-protection, and security services.
• Experience modernizing Active Directory and Microsoft Entra ID environments, including hybrid-to-cloud identity transitions, Conditional Access, Identity Governance, passwordless authentication, privileged access, and device-based access controls.
• Strong knowledge of Zero Trust architecture, information protection, data loss prevention, records and retention controls, eDiscovery, privacy, and regulatory requirements.
• Experience implementing and governing enterprise generative AI and agentic AI capabilities, including data boundaries, access controls, lifecycle management, monitoring, and responsible-use standards.
• Experience integrating Microsoft 365 and identity services with Azure, AWS, SaaS platforms, and enterprise applications.
• Experience developing automation and integration solutions using PowerShell, Microsoft Graph, REST APIs, Azure Automation, or comparable platforms.
• Experience evaluating technology products, leading proofs of concept, defining nonfunctional requirements, and guiding complex migrations and platform transformations.
• Excellent written and verbal communication, stakeholder management, facilitation, and influencing skills, including the ability to explain technical tradeoffs to executive and nontechnical audiences.
• Experience directing vendors and service providers and leading cross-functional teams in a matrixed environment.
• Experience supporting financial services, banking, credit unions, or another highly regulated industry is preferred.
• Experience with Tanium for endpoint visibility, software deployment, patching, vulnerability remediation, and security operations is preferre
• Provides matrixed technical leadership to architects, engineers, project teams, and cross-functional delivery teams.
• Provides technical oversight and performance direction for third-party vendors and service providers within assigned initiatives.
• Experience using A.I. tools preferred.

Supervisory Responsibilities

This position will not supervise employees.

Licenses and Certifications

• One or more advanced Microsoft certifications are preferred, such as Azure Solutions Architect Expert or an equivalent Microsoft 365, security, identity, or endpoint credential.
• TOGAF, CISSP, or an equivalent architecture or security certification is preferred.

Work Environment

While performing the duties of this job, the employee is regularly exposed to an indoor office setting with moderate noise.

*Most roles require working in an office setting with moderate noise and the ability to lift 25 pounds.*

Travel

Ability to travel to various worksites and be on-call may be required.

Pay Transparency 
The anticipated starting salary range for this role is $97,400.00 - $200,259.00
This position is eligible for an organizational performance based annual bonus, subject to board discretion and approval.
This position is eligible for an individual performance based annual bonus.

#LI-Hybrid