Microsoft O365

Job Summary :

We are seeking a seasoned Microsoft 365 Architect and Administrator to lead the architecture, governance, and operations of our enterprise Microsoft 365 environment. This role focuses on designing scalable identity, security, and collaboration solutions using Microsoft best practices, while also owning the daily administration of M365 services.

Key Responsibilities :

Identity & Access Management (IAM)

• Architect and manage Azure AD tenant including Conditional Access, MFA hybrid identity, and SSO integrations
• Manage lifecycle processes for joiner, mover, leaver scenarios using automation via tools like Entra
• Drive governance and automation around access provisioning, role-based access control (RBAC), and entitlement reviews.

Email & Messaging Security (Must Have)

• Administer and architect Microsoft Defender for Office 365, including configuration, tuning, and management of:
• Threat protection policies (anti-phishing, anti-spam, anti-malware).
• Safe Attachments and Safe Links policies.
• Automated investigation and response (AIR) capabilities.
• Threat intelligence monitoring and reporting.
• Manage Exchange Online Protection (EOP) and integrate with third-party Secure Email Gateways (e.g., Proofpoint).
• Collaborate with cybersecurity teams to integrate Defender alerts into incident response and SIEM systems.
• Continuously optimize policies to protect against evolving threats and data leakage.

Teams & Collaboration Tools

• Manage Teams policies, lifecycle, compliance, and integration with SharePoint and OneDrive
• Enable secure collaboration (internal & external) and ensure governance controls are in place.

Retention & Compliance

• Define and enforce retention policies, data lifecycle controls, eDiscovery, and compliance across workloads
• Support audits, investigations, and compliance with regulatory frameworks.

Operational Excellence

• Provide L3 support and guidance to IT support teams on issue resolution and best practices.
• Develop and maintain technical documentation, runbooks, and SOPs.

Stakeholder Engagement:

• Advise on Microsoft 365 licensing optimization and cost governance.
• Contribute to the enterprise roadmap and long-term Microsoft cloud strategy.

Nice to Have

Endpoint Management (Intune)

• Architect and support device management using Microsoft Intune (MDM/MAM).
• Deploy and standardize Windows Autopilot, compliance baselines, and application policies.
• Ensure secure mobile and endpoint access aligned with security policies.

Key Qualifications :

Education:

• Bachelor’s degree in computer science, Information Technology, or related field (or equivalent experience).
• Microsoft certifications such as MS-102 (or MS-100 / MS-101), AZ-104, SC-300, or MS-500 preferred.

Experience:

• 12-15 years of experience in IT infrastructure with a focus on Microsoft cloud technologies.
• 5+ years in Microsoft 365 architecture and administration in enterprise environments.
• Proven track record in large-scale enterprise deployments and governance.

Technical Skills

• Deep knowledge of Microsoft 365 suite: Exchange Online, Teams, SharePoint, OneDrive.
• Deep hands-on experience with Microsoft Defender for Office 365 including policy configuration, threat monitoring, and automated response.
• Strong command of Azure AD and hybrid identity design.
• Experience with Microsoft Intune (Autopilot, Compliance Policies, App Deployment).
• Familiarity with Identity Lifecycle Management tools.
• Strong skills in PowerShell scripting or Power Automate for automation and reporting.
• Experience with third-party tools for email security (Proofpoint, Mimecast, etc.) and IAM.

Soft Skills

• Strong communication and documentation skills.
• Ability to present and influence senior stakeholders.
• Critical thinking and problem-solving mindset.
• Experience working in a highly regulated environment (Aviation etc.) is a plus.