Job Summary:
We are seeking a highly proactive, forward-looking Assistant Microsoft Solutions Architect based in Hong Kong to lead the strategic design, comprehensive integration and continuous evolution of our global Microsoft ecosystem. Acting as the senior technical authority within our core Architect Team, this role moves far beyond passive, reactive operational maintenance ("reading manuals and enabling features"). Instead, the successful candidate will function as an internal solutions consultant, transforming complex business requirements into secure, scalable and unified Microsoft-based platforms.
The ideal candidate must possess a holistic understanding of the Microsoft landscape, including Azure, Microsoft 365, Power Platform, Dynamics 365, Copilot and Copilot Studio. You will collaborate with technology, security, compliance and business stakeholders to modernize platforms, improve productivity and enable secure adoption of Microsoft AI capabilities.
Responsibilities:
- Ecosystem Synergy & Solution Design: Design, integrate, and govern holistic solutions across the entire Microsoft enterprise stack. Establish long-term architectural roadmaps, design standards and patterns that create seamless data, identity and workflow flows across Azure, M365, SharePoint, MS Teams, Power Platform and Dynamics 365
- Modern Trends & AI Infrastructure Readiness: Keep a close pulse on the latest Microsoft roadmap developments. Evaluate, architect and recommend practical business use cases for Microsoft Copilot, Copilot Studio, GitHub Copilot and Azure AI services. Conduct rigorous readiness assessments regarding tenant preparation, information protection and infrastructure scalability for emerging technologies
- Microsoft Copilot Strategy & Governance: Lead Microsoft 365 Copilot adoption planning, including pilot use cases, governance principles, responsible AI guidance, success metrics and stakeholder enablement
- Copilot Data Readiness & Security: Assess Microsoft 365 permissions, data protection, sensitivity labels, DLP and access controls to ensure Copilot is deployed within secure enterprise boundaries
- Copilot Studio & Automation: Design or govern Copilot Studio agents, connectors and Power Platform integrations that automate business workflows safely and effectively
- Identity, Security & Zero-Trust Governance: Define, implement and enforce global security baselines and compliance controls. Oversee complex architectures involving Microsoft Entra ID (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC) and privileged access management, ensuring alignment with strict international security and data protection standards
- Unified Workspace & Advanced Collaboration: Drive the architectural optimization and feature enablement of modern workplace services, specifically maximizing the capability and resilience of global MS Teams (Enterprise Voice / Collaboration), Exchange Online, Intune (endpoint management) and Microsoft Purview (data governance)
- Technical Authority & Team Transformation: Act as the ultimate technical escalation point and leader for the infrastructure and engineering teams. Conduct architecture reviews and technical decision-making for complex, high-impact incidents, actively mentoring and coaching local administrators to shift team culture from standard manual-following to proactive problem-solving
- Global Collaboration & Governance: Partner closely with regional and international cross-border technology, infrastructure and business teams to gather requirements, align solution designs and participate in architecture / change advisory boards to assess risks
Requirements:
- 10+ years of progressive experience in IT infrastructure, systems engineering, enterprise technology or digital workplace transformation, with at least 5+ years of dedicated hands-on experience designing, integrating and implementing Microsoft Azure and / or Microsoft 365 enterprise-level solutions
- Deep, demonstrable understanding of the broader Microsoft ecosystem, with a proven track record of showing how disparate platform components (Cloud, Security, Productivity, Low-Code / No-Code and AI tools) work together seamlessly as a single, unified enterprise solution
- Practical knowledge or deployment exposure to Microsoft Copilot applications, with the ability to strategically assess organizational readiness, covering identity baselines, permissions, data governance and data leakage prevention (DLP)
- Strong understanding of Microsoft 365 Copilot security, including user permissions, Microsoft Graph grounding, Entra ID, sensitivity labels, audit, retention and enterprise data protection
- Experience with Copilot Studio, Power Platform, workflow automation and secure integration with enterprise systems is highly preferred
- Ability to identify practical Copilot use cases, define adoption outcomes and provide clear guidance on responsible AI usage to technical and non-technical stakeholders
- Advanced architectural knowledge of Azure infrastructure (Compute, storage, hybrid networking, monitoring, ExpressRoute)
- Strong expertise in M365 enterprise administration, hybrid identity lifecycles and Microsoft Defender XDR security suites
- Solid proficiency in scripting and automation tools (e.g. PowerShell, Python or Bash) to enforce architectural standards and automate complex administrative workflows
- Strong analytical, documentation and troubleshooting skills under high-pressure commercial scenarios. Excellent ability to turn complex technical topics and emerging roadmaps into clear, value-driven explanations for both engineering teams and non-technical management
- Excellent written and spoken English for smooth global collaboration. Fluency in Cantonese and / or Mandarin is highly preferred to facilitate effective technical mentorship and collaboration with regional teams
We offer 5-day week, competitive remuneration package including double pay, medical, life & personal accident insurances, education sponsorship and good career prospects to the right candidate. Interested parties please send your resume with expected salary by clicking Quick Apply.
(All personal data collected would be used for recruitment purpose only)
