Senior O365 Engineer (R-19417)

Key Responsibilities:

Administer, support, and maintain Microsoft 365 services across the platform, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and Microsoft 365 Groups.

Configure and manage single sign-on (SSO) applications, app registrations, and enterprise application integrations in Microsoft Entra ID (Azure Active Directory).

Design, implement, and maintain conditional access policies to secure identity and enforce access controls across the environment.

Administer privileged access using Privileged Identity Management (PIM), including just-in-time activation of privileged roles, eligible role assignments, and periodic privileged-access reviews.

Apply data governance, security, and compliance controls using Microsoft Purview, including data classification, data loss prevention (DLP), and retention policies.

Develop and maintain PowerShell scripts to automate provisioning, administration, reporting, and routine operational tasks across Microsoft 365 workloads.

Administer SharePoint Online, OneDrive, and Microsoft Teams, including site collections, permissions, sharing and external-access policies, governance, and lifecycle management.

Support Exchange Online configuration, including mail flow, connectors, distribution groups, and messaging and compliance policies.

Manage Microsoft 365 Groups and identity lifecycle, including provisioning, membership, and periodic access reviews.

Monitor service health, troubleshoot issues, and optimize performance across Microsoft 365 and the broader Microsoft platform.

Support the deployment, configuration, governance, and adoption of Microsoft 365 Copilot, including licensing, data-access readiness, and security and compliance controls.

Collaborate with security, infrastructure, and business teams to align Microsoft 365 configurations with organizational, security, and end-user needs.

Essential Skills Needed:

Experience across all Microsoft platforms, with hands-on administration of Microsoft 365 services (Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft 365 Groups).

Hands-on experience with single sign-on (SSO) applications, app registrations, and enterprise application integration in Microsoft Entra ID (Azure Active Directory).

Experience configuring and managing conditional access policies, Privileged Identity Management (PIM) roles, and identity and access controls.

Familiarity with Microsoft Purview governance features and related security and compliance controls, including data classification, data loss prevention (DLP), and retention.

Proficiency with PowerShell and scripting to automate administration, provisioning, and reporting across Microsoft 365.

Experience administering SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 Groups, and Exchange Online.

Familiarity with Microsoft 365 Copilot deployment, governance, licensing, and adoption, including data-access and security readiness.

Familiarity with Microsoft Intune for endpoint and device management is a plus (optional).

Ability to collaborate across technical functions and communicate clearly with partners.

Certifications such as MS-102 (Microsoft 365 Administrator) and SC-300 (Identity and Access Administrator) are preferred. Additional certifications including MS-700, SC-400, SC-900, AZ-104 and AZ-900 are beneficial.

Strong analytical and problem solving skills.

Experience with platform performance optimization and troubleshooting.

Show an ownership mindset in everything you do; be a problem solver, be curious and be inspired to take action, be proactive, seek ways to collaborate and connect with people and teams in support of driving success.

Continuous growth mindset, keep learning through social experiences and relationships with stakeholders, experts, colleagues and mentors as well as widen and broaden your competencies through structural courses and programs.

Where applicable, fluency in English and languages relevant to the working market.