IT Carve-Out Lead / Infrastructure Separation Architect – this is a consulting opportunity and will be contract-based for as long as needed. This is a remote opportunity (though must be in the United States). Occasional travel may be required.
Position Overview
We are seeking an experienced IT Carve-Out Lead / Infrastructure Separation Architect to lead the technology separation of multiple business entities from a shared environment. This consultant will assess existing dependencies, define the future-state architecture, and coordinate the migration of identity, security, endpoint, network, DNS, and software development environments into independent platforms.
The ideal candidate has successfully led technology carve-outs, divestitures, tenant separations, or other complex infrastructure migration programs. This role requires someone who can operate at both the strategic and technical levels—developing the overall separation roadmap while working closely with technical teams and vendors to execute migrations with minimal disruption.
Key Responsibilities:
IT Separation Strategy and Planning
- Lead discovery and assessment of shared technology environments, systems, dependencies, vendor relationships, and operational risks.
- Develop the overall IT separation strategy, future-state architecture, migration roadmap, and cutover schedule.
- Define workstreams, dependencies, milestones, resource requirements, risks, and rollback plans.
- Coordinate separation activities across infrastructure, security, identity, endpoints, software development tools, and IT operations.
- Establish clear exit criteria for any temporary shared services or transition arrangements.
Infrastructure, Identity, and Security Separation
- Lead DNS migration and domain separation activities, including migrations to Cloudflare.
- Coordinate the separation of an existing Zscaler environment and the implementation of a new standalone instance.
- Redesign the Microsoft Active Directory environment and support its transition from a hybrid model toward a cloud-based identity architecture.
- Establish independent identity, access, security, network, and administrative controls for the separated organizations.
- Ensure appropriate testing, documentation, security validation, and business continuity throughout each migration.
Endpoint and Device Migration
- Lead the migration of Apple Mac laptops into a new JumpCloud environment.
- Define endpoint enrollment, configuration, access, security, and user-transition requirements.
- Coordinate device deployment planning and evaluate new device procurement or lifecycle-management providers as needed.
- Partner with internal support teams and external vendors to minimize end-user disruption.
GitHub and Development Environment Separation
- Lead the separation and relocation of GitHub organizations and a high volume of repositories.
- Coordinate the migration of repository permissions, teams, branches, secrets, GitHub Actions, integrations, and other development dependencies.
- Partner with engineering and DevOps stakeholders to preserve security, access, source-code integrity, and development continuity.
- Develop migration validation and rollback procedures for critical repositories and integrations.
Program and Stakeholder Leadership
- Manage multiple concurrent technical workstreams and maintain an integrated separation plan.
- Partner with executive leadership, IT, Security, Engineering, Legal, Finance, HR, and external vendors.
- Provide clear reporting on project status, risks, dependencies, decisions, and upcoming milestones.
- Manage vendors and specialized technical resources responsible for individual migration activities.
- Create documentation and operational handoff materials for the newly independent environments.
Required Qualifications
- Significant experience leading enterprise infrastructure migrations, technology carve-outs, divestitures, or complex tenant separations.
- Strong understanding of enterprise identity, network security, DNS, endpoint management, and cloud-based infrastructure.
- Experience developing future-state architecture, migration roadmaps, cutover plans, risk mitigation strategies, and rollback procedures.
- Demonstrated ability to coordinate technical teams, business stakeholders, and third-party vendors.
- Strong program leadership, documentation, and executive communication skills.
- Ability to work hands-on with technical teams and challenge or validate proposed migration approaches.
Preferred Experience
- Cloudflare DNS migrations.
- Zscaler tenant separation or greenfield implementation.
- JumpCloud and macOS device migrations.
- Microsoft Active Directory redesign and hybrid-to-cloud identity migration.
- Microsoft Entra ID and Microsoft 365 tenant environments.
- Large-scale GitHub organization and repository migrations.
- M&A integrations, divestitures, or private equity–backed technology transformation programs.
- Endpoint procurement, deployment, or device lifecycle vendor transitions.
Ideal Candidate Profile
This role is best suited for a senior consultant or architect who has previously taken a business from a shared technology environment to independent operations. The successful candidate will understand that an IT carve-out is more than a collection of platform migrations—it requires careful dependency mapping, sequencing, stakeholder coordination, testing, and operational planning to ensure the separated organizations can function independently from day one.