Microsoft 365 Administrator and Platform Engineer

PRIMARY:

MICROSOFT 365 PLATFORM ADMINISTRATION & OPERATIONS

• Administer and support the Microsoft 365 tenant (Business Premium): identity, security, device management, collaboration services
• Manage the full lifecycle of user accounts: joiners/movers/leavers, access reviews, group-based access, licensing, mailbox management, secure authentication
• Configure and maintain core Microsoft 365 workloads:
• Microsoft Entra ID: users, groups, roles, conditional access, MFA, SSO integrations, identity governance
• Exchange Online: mail flow, shared mailboxes, permissions, retention, transport rules, delivery troubleshooting
• Microsoft Teams: policies, calling/meetings, lifecycle governance, troubleshooting
• SharePoint Online & OneDrive: permissions models, sharing governance, site management, user support
• Intune / Endpoint Manager: device enrollment, compliance policies, configuration profiles, app deploymen
• Troubleshoot issues across authentication, device, client configuration, and service health
• Implement security controls: baseline hardening, secure score improvements, audit logs, retention/sensitivity labelling
• Create and maintain runbooks, standard operating procedures, and knowledge articles
• Operational ownership: root-cause analysis, trend identification, preventative controls, change management
• PowerShell scripting for automation and repetitive admin tasks

SECONDARY:

INTERNAL TOOLS & INTEGRATION DEVELOPMENT (Azure)

• Design and build internal applications and integration services on Azure to support Operations
• Develop REST APIs and integration services using:
• Azure Functions, Logic Apps, API Management (for integration orchestration)
• Secure authentication patterns (OAuth2/OIDC, service principals, managed identities)
• Build integrations across SaaS platforms (HRIS, finance, CRM, ticketing, etc.) using APIs and webhooks
• Implement with quality: error handling, observability, monitoring, documentation
• Deploy solutions using Infrastructure-as-Code and CI/CD pipelines (Azure DevOps or GitHub Actions)
• Support and iterate on solutions based on operational feedback

REQUIRED SKILLS:

MICROSOFT 365 ADMINISTRATION (PRIMARY)

• Demonstrable experience administering an enterprise Microsoft 365 tenant (hundreds of users)
• Strong hands-on capability with:
• Microsoft Entra ID: account provisioning, group/role management, conditional access, MFA, SSO integrations, auth troubleshooting
• Exchange Online: mailbox management, mail flow, permissions, retention, delivery troubleshooting
• Teams: policies, governance, troubleshooting connectivity and client issues
• SharePoint Online & OneDrive: permissions models, sharing governance, site management
• Intune: device enrollment, compliance policies, device troubleshooting
• Confident troubleshooting across authentication, device, client, and service health
• PowerShell scripting: Microsoft 365 modules (Entra, Exchange, SharePoint) for automation and support playbooks
• Understanding of identity, access, security controls, and compliance in Microsoft 365

AZURE & DEVELOPMENT (SECONDARY)

• Hands-on experience with Azure services:
• Azure Functions, Logic Apps, App Services, API Management, Key Vault
• Storage solutions (SQL Database, Cosmos DB, Storage Accounts)
• SaaS API integration capability:
• REST APIs, webhooks, OAuth2/OIDC, service principals
• Error handling, retry patterns, observability
• Basic full-stack capability:
• Front-end: JavaScript/TypeScript (React, Vue, Angular) or willingness to learn
• Back-end: Node.js, .NET, Python, or Java for API/service development
• Infrastructure-as-Code basics (Bicep, Terraform, or ARM)
• CI/CD pipelines (Azure DevOps or GitHub Actions)
• Cloud security fundamentals: least privilege, secrets management, secure APIs

DESIRABLE

• Microsoft Graph API experience (for administration and solution development)
• Experience integrating with common SaaS platforms (HRIS, finance, CRM, ticketing)
• Microsoft 365 security/compliance exposure (information protection, retention, audit, baselines)
• Azure certifications (AZ-104, AZ-900, SC-300)
• ITIL familiarity (incident/problem/change management)
• Experience with managed identities and secure integration patterns