Senior System Architect

Amphenol (www.amphenol.com) is a Fortune 500 company and one of the largest manufacturers of interconnect products in the world. We design, manufacture, and market electrical, electronic, and fiber optic connectors, coaxial and flat-ribbon cable, and interconnect systems. The primary end markets for our products include communications and information processing, aerospace, military electronics, automotive, and other industrial applications.

Job Description:

The Senior System Architect is the senior technical authority responsible for the architecture, governance, integration, security, resilience, and lifecycle management of the company’s enterprise systems and hybrid infrastructure. This role owns the target architecture and technical standards across Microsoft Azure, Azure Local, Microsoft Entra ID, Microsoft 365, endpoint and security platforms, IT service management, monitoring, backup, collaboration, business applications, and AI services. Working closely with IT leadership, global teams, auditors, vendors, and regional operations, the Senior System Architect translates business and compliance requirements into secure, scalable, supportable, cost-effective solutions; leads complex projects and modernization initiatives; mentors technical teams; and ensures system inventories, operational backlogs, architecture records, audit evidence, domains, certificates, and service documentation remain complete and current.

Roles & Responsibilities:

• Technical Leadership: Serve as the senior technical authority for infrastructure platforms. Provide architecture direction, review designs and implementation plans, mentor System Administrators, coordinate priorities with IT leadership, and lead knowledge sharing and technical standards across regional teams.
• Infrastructure Architecture: Design, document, and own the end-to-end architecture for on-premises, hybrid, and cloud infrastructure, including servers, storage, identity, networking, and backup, ensuring scalability, high availability, and cost-efficiency.
• Cloud & Hybrid Infrastructure Architecture: Architect and govern Microsoft Azure and Azure Local environments, including landing zones, subscriptions, resource groups, identity integration, virtual machines, networking, storage, Azure Files, backup and recovery, monitoring, DNS, Key Vault, Azure Policy, capacity planning, lifecycle management, and cost optimization. Define secure integration patterns between cloud, on-premises, SaaS, and regional environments.
• IT Modernization: Build and execute the infrastructure modernization roadmap: migrate legacy workloads to Azure, upgrade or retire end-of-life systems, adopt PaaS/SaaS where appropriate, and introduce automation and Infrastructure as Code (PowerShell, Bicep/ARM, or Terraform).
• Identity, Privileged Access & Endpoint Architecture: Own the architecture and governance of Active Directory, Microsoft Entra ID, Entra Connect, Conditional Access, MFA, Delinea privileged access management, Intune, Windows Autopilot, PolicyPak, and PrinterLogic. Establish role-based access, least-privilege controls, device compliance, configuration standards, privileged credential protection, access reviews, and secure joiner-mover-leaver integration.
• M365 Administration: Govern Microsoft 365 services including Exchange Online, Intune, Teams, SharePoint Online, and OneDrive. Ensure secure, reliable, and well-governed operation of the Microsoft 365 environment.
• Security, Data Protection & AI Governance: Define and govern the infrastructure security baseline using Microsoft Defender, Microsoft Purview, Delinea, Intune, PolicyPak, and related controls. Establish standards for threat protection, data classification and retention, vulnerability and patch management, Zero Trust, secure administration, and incident response. Provide architecture and governance for Microsoft Copilot, ChatGPT, Power Platform, and other AI or automation services, including data protection, acceptable use, access control, integration, and compliance requirements.
• Compliance, Access Governance & Audit Readiness: Design and maintain auditable infrastructure controls aligned with corporate policies, SOX IT General Controls, ISO 27001, NIST CSF, and CIS Benchmarks. Own or support RBAC, Privileged Identity Management, segregation of duties, privileged access reviews, reviewer independence, change control, evidence retention, and remediation tracking across Azure, Microsoft Entra ID, Active Directory, and core infrastructure platforms.
• Backup, Recovery & Business Continuity: Architect and govern enterprise data protection using Veeam Backup, Azure Backup, Azure Site Recovery, and applicable on-premises or cloud services. Define protection groups, backup schedules, retention standards, immutable or offline protection where appropriate, RTO/RPO targets, regional recovery designs, recovery testing, and evidence requirements; ensure failures and corrective actions are tracked to closure.
• Virtualization & Data Centre: Manage Hyper-V and/or VMware virtualization, storage, and on-premises server infrastructure, including capacity planning and hardware lifecycle refresh.
• IT Service Management, Monitoring & Operations: Define the service-management and observability architecture across Freshservice, ServiceNow, NinjaOne, Zabbix Cloud, Azure Monitor, and related platforms. Maintain service catalogues, system and service inventories, ownership records, support models, escalation paths, operational dashboards, SLAs, recurring operations tasks, and project and operations backlogs. Drive problem management, root-cause analysis, automation, platform rationalization, and timely closure of technical actions.
• Enterprise Platforms, Projects & Vendor Management: Provide architecture oversight for Salesforce/CRM, Microsoft Power Platform, Azure DevOps, Zoom, Teams Calling and Cloud SBC, and other enterprise integrations. Lead upgrades, migrations, new implementations, and service transitions from design through operational handover. Manage technical relationships, licensing, renewals, support, and service performance across Insight CSP, Softchoice CSP, Park Place Technologies, StormWind, and other vendors or cloud solution providers.
• Documentation, Audit Evidence & Lifecycle Governance: Maintain target-state and as-built architecture diagrams, technical standards, SOPs, runbooks, configuration baselines, system and service inventories, dependency maps, ownership records, and project and operations action lists. Govern domain names, DNS records, TLS/SSL certificates, renewals, service accounts, licensing records, and platform lifecycle milestones. Prepare and submit accurate audit documentation, control evidence, access-review records, recovery-test results, change records, remediation plans, and status updates within required timelines.
• Stakeholder Collaboration: Partner with IT leadership, business units, and global Amphenol IT teams to align infrastructure with business needs and corporate standards.

What You Bring to the Table:

• Education: Bachelor’s degree in Computer Science, Information Technology, or a closely related field. Equivalent combination of education and experience will be considered.
• Experience: More than 10 years of progressive experience in system architecture, system administration, and enterprise IT infrastructure, including at least 5 years in a senior, lead, or architect role and demonstrated experience designing and managing production Azure and hybrid-cloud environments.
• Leadership: Demonstrated experience acting as a senior technical lead or architect, setting infrastructure standards, mentoring administrators, coordinating across global teams, and leading complex cloud, identity, backup, or infrastructure modernization initiatives from design through operational handover.
• Technical Skills:
  • Expert knowledge of Windows Server, Active Directory, Microsoft Entra ID (including hybrid identity and Entra Connect), Group Policy, and M365.
  • Deep hands-on experience architecting and governing Microsoft Azure and Azure Local, including landing zones, subscriptions, resource groups, IaaS, networking, storage, Azure Files, Azure Backup and recovery, Azure Monitor, Azure Policy, RBAC, PIM, DNS, certificates, hybrid integration, capacity planning, and cost management.
  • Strong architecture and operational experience across Microsoft Entra ID, Intune, Microsoft Defender, Microsoft Purview, Delinea, PolicyPak, PrinterLogic, Microsoft 365, Copilot, Power Platform, and Azure DevOps, with the ability to define secure integrations, access models, configuration standards, and lifecycle controls.
  • Automation and scripting with PowerShell; experience with Infrastructure as Code (Bicep/ARM or Terraform) is a strong asset.
  • Proficiency with virtualization (Hyper-V and/or VMware), storage, and backup/DR solutions.
  • Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VPN, firewalls, and VLANs.
  • Knowledge of Alibaba Cloud is highly desirable.
  • Experience with enterprise operations and SaaS platforms such as Freshservice, ServiceNow, NinjaOne, Zabbix Cloud, Veeam Backup, Zoom, Teams Calling/Cloud SBC, Salesforce/CRM, Azure DevOps, CSP licensing portals, and third-party support services; able to maintain service catalogues, system inventories, vendor records, support models, and prioritized project and operations backlogs.
• Security & Compliance:
  • Working knowledge of IT General Controls (SOX), ISO 27001, NIST CSF, and CIS Benchmarks.
  • Experience designing and operating auditable access-governance processes, including privileged access reviews, segregation of duties, reviewer independence, evidence collection, remediation tracking, and support for internal and external audits.
• Certifications (Preferred):
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Azure Administrator Associate
  • Microsoft 365 Certified: Administrator Expert
  • Windows Server Hybrid Administrator Associate
• Certifications (Nice to Have):
  • Microsoft Certified: Cybersecurity Architect Expert or Security Operations Analyst Associate
  • ITIL 4 Foundation
  • CISSP, CISM, or CCNA
• Other Skills:
  • Strategic thinker who can translate business needs into a practical technology roadmap.
  • Excellent communication skills, with the ability to explain technical topics to leadership and non-technical stakeholders.
  • Strong documentation and technical writing skills.
  • Calm, structured problem-solving under pressure, including major incident management.
  • Ability to work collaboratively across a global organization and independently when necessary.

Why Work for Us?

• Benefits Coverage: Comprehensive health, dental, vision, and travel insurance.
• Health Care Spending Account: Additional financial support for health-related expenses.
• Pension Plan: Company-supported pension scheme.
• Incentive Plans: Progressive employee incentive plans.
• Talent Development: Opportunities for professional growth and development.
• Company Recreation Club: Participate in fun activities, draws with exciting prizes, summer BBQs, holiday parties, and more!

Come join the Amphenol family!

The base salary range for this position is $160,000 - $180,000 annually. In determining the rate of pay, Amphenol considers a variety of nondiscriminatory factors, including but not limited to geographic location, relevant industry experience, qualifications, skills, and education. It would be rare for an individual to be hired at or near the top of the range for a given role. Base salary is one facet of Amphenol's total rewards package which includes participation in our comprehensive benefits program with medical, dental, and vision benefits, vacation, sick leave, paid holidays, life insurance, short/long term disability, and membership in our Defined Contribution Pension Plan. 

Amphenol Corporation is proud of our reputation as an excellent employer. Our main focus is to provide the highest level of support and responsiveness to both our employees and our customers. Amphenol Corporation offers the opportunity for career growth within a global organization. We believe that Amphenol Corporation is unique in that every employee, regardless of his or her position, has the ability to positively impact the business.