Apply on Employer Site

First Horizon Bank · 1 day ago

Systems Architect

Memphis, TN

Full-time

Onsite

Senior Level

7+ years exp

First Horizon Bank is a leading regional financial services company, dedicated to helping clients unlock their full potential. The Systems Architect will lead the design and delivery of Microsoft 365 services, ensuring reliability, security, and compliance while partnering with various teams to meet regulatory expectations.

BankingFinanceFinancial ServicesRisk Management

No H1B

Responsibilities

Own enterprise architecture for Microsoft 365: Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID (Azure AD), Intune/Endpoint Manager, and Microsoft Purview/Compliance

Define standards, reference architectures, and roadmaps for identity, messaging, collaboration, and device management across hybrid/on‑prem and cloud environments

Lead migrations and modernization (e.g., Exchange/SharePoint to Online), tenant‑to‑tenant moves, and hybrid identity (AD DS + Entra ID) integrations

Implement Zero Trust controls: Conditional Access, MFA, RBAC/PIM, DLP, sensitivity labels, retention, eDiscovery, audit and alerting, and secure sharing policies

Establish Microsoft 365 governance: tenant configuration baselines, change management, environment segmentation, lifecycle management, and license optimization

Automate operations with PowerShell and Microsoft Graph; build runbooks, deployment pipelines, and monitoring dashboards for reliability and performance

Integrate Microsoft 365 with enterprise platforms (e.g., SIEM/Sentinel, email security gateways, eDiscovery/archiving, ITSM/ServiceNow) and key third parties

Partner with Information Security, Risk, Legal/Compliance, Network, End User Computing, and Vendor Management to meet regulatory expectations (e.g., GLBA/FFIEC) and protect client information

Design and test business continuity/disaster recovery for collaboration and messaging services; lead major incident response and post‑mortems

Provide Level 3/architecture‑level guidance, mentor engineers, and produce high‑quality documentation (diagrams, standards, runbooks)

Qualification

Microsoft 365 architectureExchange OnlineEntra IDPowerShellSecurity complianceIdentityAccess managementMicrosoft GraphStakeholder engagementBachelor’s degreeNetworking fundamentalsCommunication

Required

7+ years in enterprise IT, including 3–5+ years architecting Microsoft 365/Entra ID in mid‑to‑large organizations

Expert knowledge of Exchange Online, Teams, SharePoint Online/OneDrive, Entra ID, Intune/Endpoint Manager, and Microsoft Purview/Compliance features

Strong identity and access background: SSO/Federation, SAML/OAuth/OIDC, Conditional Access/MFA, RBAC/PIM, and hybrid AD

Security/compliance experience in regulated environments: DLP, retention/eDiscovery, audit, data classification/sensitivity labels, and secure external collaboration

Proficiency in PowerShell and Microsoft Graph; proven automation of tenant configuration, license management, and operational tasks

Working knowledge of networking and email fundamentals: DNS, SMTP, TLS, proxy/firewall considerations for Microsoft 365 endpoints

Excellent communication and stakeholder engagement skills; able to translate complex designs into clear guidance for associates and leaders

Bachelor's degree in Computer Science, Information Systems, or equivalent experience