Microsoft Cloud Architect & Automation Specialist

Abnormal AI

Full-time

Remote

Job description

Remote - USA
Full-time

About the Role

This role starts with leading the Google Workspace to Microsoft 365 migration project but transitions into long-term management of the Microsoft environment with opportunities to expand responsibility to other platforms. The ideal candidate will combine deep technical expertise with strategic thinking and automation skills to build scalable, efficient solutions. You'll have the opportunity to shape the technical direction of our environment while implementing innovative automation approaches that reduce manual effort and improve reliability.

We're looking for someone who can think beyond the immediate migration project to create a sustainable, automated environment that grows with our organization. Your ability to develop API-based solutions and automate complex processes will be crucial to success in this role.

What you will do

Technical Leadership & Strategy

Serve as the primary Microsoft technical expert and decision-maker for the migration project
Develop strategic roadmaps for both migration and long-term Microsoft environment management
Evaluate and recommend technical solutions that align with business objectives
Collaborate with stakeholders to establish technical requirements and success criteria
Provide technical guidance and mentorship to team members

Google Workspace to Microsoft 365 Migration

Lead the migration of approximately 500 mailboxes (~2.5TB of data) from Google Workspace to M365
Configure the migration environment according to organizational requirements
Recommend and implement appropriate migration tools and methodologies
Conduct test and pilot migrations with diverse use cases
Provide post-migration support for test, pilot, and production users
Validate migrated mailboxes for availability, mail flow, and access

Microsoft Intune Configuration and Management

Review existing Intune cloud services in the legacy M365 tenant
Design and implement Mobile Application Management (MAM) and application protection policies
Configure MDM Profiles for Mobile Devices
Implement governance policies and conditional access policies for BYOD iOS and Android devices

Environment Preparation and Configuration

Assist with licensing and license assignment automation
Implement security baselines and configure security groups
Design and configure the email environment including:

Mailbox design and configuration
Policy and structure design
Mail flow, connectors, transport rules, SPF/DKIM/DMARC knowledge is a plus
Shared and resource mailbox configuration

Configure conditional access for compliant devices
Implement endpoint security and encryption measures
Ensure security policy alignment with legacy M365 tenant
Configure and test imageless endpoint deployment including:

Autopilot Management
Endpoint compliance and conditional access policies
Remediation scripts
PatchMyPC integration
Entra/Windows365 solutions for cloud PC needs
Autopatch Management
Application deployment

Migrate existing endpoints to the new environment

Security and Compliance

Configure Microsoft Purview for DLP, Information Protection, and compliance
Implement Microsoft Defender for M365 and Defender for Endpoint
Configure Secure Score, Attack Simulation, and Safe Links/Attachments

Automation and Process Improvement

Build API-based solutions to automate migration processes and ongoing management tasks
Develop custom scripts and tools to enhance operational efficiency
Create self-service options for common user requests to reduce IT workload
Implement monitoring and alerting systems with automated remediation
Establish automated testing and validation processes for configurations and updates

Long-Term Environment Management

Develop scalable architecture for ongoing Microsoft environment management
Create automation roadmaps for continuous improvement of the environment
Establish governance frameworks and best practices for system administration
Build reporting and analytics capabilities to track system health and performance
Plan for future expansion to manage additional platforms beyond Microsoft
Maintain security posture through automated scanning and remediation

Knowledge Transfer and Documentation

Document common administrative and operational maintenance tasks
Create documentation for custom automation solutions and APIs
Develop runbooks for automated and manual processes
Offer guidance on best practices for ongoing environment management

Must Haves

Proven experience in migrating from Google Workspace to Microsoft 365
In-depth knowledge of M365 configuration and administration
Expertise in Microsoft Intune and mobile device management (iOS and Android)
Strong understanding of identity management, including SSO integration with Okta
Proficiency in configuring and managing conditional access policies
Knowledge of security and compliance solutions within the Microsoft ecosystem
Experience with endpoint management and deployment solutions
Strong programming and scripting skills (PowerShell, Python, JavaScript, etc.)
Experience developing and implementing API-based automation solutions
Background in creating self-service and automated workflows for routine tasks
Ability to design and implement infrastructure-as-code solutions
Demonstrated ability to translate business requirements into technical solutions

Nice to Haves

Google Workspace administration knowledge
Familiarity with Splunk integration
Experience with cloud-based APIs and webhooks
Experience leveraging M.io for free/busy coexistence
Knowledge of containerization and orchestration (Docker, Kubernetes)
Experience with infrastructure-as-code tools (Terraform, ARM templates, etc.)
Background in developing custom connectors and integrations between systems
Experience with monitoring and analytics including:

M365 Admin Center reports
Azure AD Sign-in logs and activity logs
Defender and Compliance dashboards
Usage analytics (Power BI, Viva Insights)

Microsoft certifications (MS-900, MS-100, MS-101, SC-900, etc.)
Experience in providing client-facing consulting services
Background in developing self-service portals and automation frameworks

Work Location and Schedule

Ability to work during US Pacific Standard Time (PST) hours is required
Remote position with occasional client meetings as needed

#LI-RT1

At Abnormal AI, certain roles are eligible for a bonus, restricted stock units (RSUs), and benefits. Individual compensation packages are based on factors unique to each candidate, including their skills, experience, qualifications and other job-related reasons. We know that benefits are also an important piece of your total compensation package. Learn more about our Compensation and Equity Philosophy on our Benefits & Perks page.

Base salary range:

$131,800—$155,000 USD

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click If you would like more information on your EEO rights under the law, please click

As part of Abnormal AI's secure hiring practices, we conduct video interviews and validate applicant identity at various stages through our recruitment process. Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI's policies relevant to our security and privacy standards. Abnormal AI is committed to protecting your privacy. Please review our Abnormal AI Applicant Privacy Policy for full information about how Abnormal AI uses your personal information. By submitting an application you confirm that you have read and understand the Abnormal AI Applicant Privacy Policy.

About Abnormal AI

We're one of the world's fastest growing cybersecurity companies, on a mission to protect the modern workplace from the most pressing threats. Our AI-native technology was built from the ground up to tackle forward-looking security challenges, and our team works with bleeding-edge technology to keep our customers and their people safe as attacks grow ever more sophisticated. Our team is what makes us successful, which is why we're committed to a culture of learning, ownership, and high performance, where you'll have the opportunity to accelerate your growth and unlock excellence with the support of talented colleagues.

Our Benefits

Taking care of our team goes beyond the office. Our compensation and benefits philosophy is designed to put attract, motivate, and retain top talent: Competitive Compensation We pay competitively to attract, reward, and retain top talent in the market

Equity is an important part of our total comp strategy

When the company does well, we all do well. Equity is an important and exciting part of our total compensation strategy as a pre-IPO startup. We’re guided by the belief our team members should share in the financial success of our company and grant equity accordingly.

Flexible PTO

All regular salaried team members enjoy flexible PTO. We want team members to grow with us, and a big part of that is making sure our team has the opportunity to rest and recharge. We also observe 12 paid holidays every year.

Generous Healthcare Coverage for You and Your Family

Taking care of our team goes beyond the office. In the US, we cover 100% of employee health care premium costs, and up to 100% for dependents, depending on the plan. Internationally, we offer similarly generous coverage, customized to each country in which we operate.

Fully Distributed Workforce

Operating as a globally-distributed, majority remote company means we get to work with talented folks, no matter where they live. We prioritize a balance of deep focus time with Zoom meetings, and regular in-person events. As a fast growing startup, we continuously review, improve, and personalize our benefits offerings based on the team’s input. Don’t see something that’s important to you? Let us know!

Our Interview Process

We value transparency at Abnormal, and our interview process is no exception.

Inclusion Matters

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click If you would like more information on your EEO rights under the law, please click

Privacy Policy

Learn more about Abnormal's Privacy Policy

Recruiting Imposter Alert

We have been made aware that there are potential scammers posing as Abnormal AI recruiters. Please ensure that any communication you have with our recruitment team comes from an official Abnormal email domain. Your safety and privacy are important to us, and we will never request sensitive personal information outside of our secure application process. Thank you for helping us maintain a secure and trustworthy application experience. Should you encounter what you believe to be a scamming attempt at any time in your recruiting process, please let us know at [email protected]

Apply