Engineer, Microsoft 365
KeHE Distributors · Naperville, IL · 2 wk ago
On-siteEngineering$96k/yrFull-time
Primary Responsibilities
- Administer the Microsoft 365 tenant including configuration, licensing, subscriptions, service health, and RBAC.
- Automate tenant operations using PowerShell, Microsoft Graph, and administrative APIs.
- Enforce tenant-wide policies for security, compliance, governance, external sharing, and lifecycle management.
- Evaluate and validate roadmap and preview features before production rollout; conduct tenant health assessments and drive continuous improvements to performance, security, and adoption.
- Identity & Access Management
- Administer Microsoft Entra ID including Conditional Access, MFA, passwordless authentication, SSO, PIM, B2B/B2C Integrations and identity governance.
- Manage hybrid identity with Active Directory and Entra Connect.
- Implement and support Zero Trust controls across Microsoft 365.
- Monitor identity security posture, remediate risks using Microsoft Defender for Identity, and support identity, access, and governance compliance initiatives.
- Configure and maintain sensitivity labels, retention policies, and information protection policies in Microsoft Purview.
- SharePoint & Collaboration Design, deploy, and maintain SharePoint Online architecture and governance standards.
- Configure and manage SharePoint Online, OneDrive, and Teams integrations to support intranet, document management, and collaboration solutions.
- Execute and support content migrations and information architecture improvements.
- Implement site lifecycle management, provisioning standards, external sharing controls, and governance policies.
- Microsoft Copilot & AI Enablement
- Deploy and configure Microsoft Copilot for Microsoft 365 including readiness assessments, phased rollout, and adoption programs.
- Implement and support Copilot Studio agent lifecycle from proof-of-concept through production, enforcing least-privilege access and change management procedures.
- Assist in developing governance standards and data classification requirements for Copilot and its agents in partnership with Security and the AI committee.
- Partner with business stakeholders to identify AI-driven productivity opportunities and translate them into governed solutions.
- Monitor Copilot adoption, effectiveness, and security impacts; report outcomes to IT leadership.
- Security
- Maintain secure configurations across all M365 platforms aligned with NIST and CIS frameworks; drive Secure Score improvements, Compliance Manager remediations, and tenant hardening initiatives.
- Support security audits, regulatory requirements, and policy compliance across the M365 environment.
- Support and Operations
- Provide Level 2/3 support, troubleshooting, and root cause analysis for Microsoft 365 services.
- Create and update documentation, architecture diagrams, FAQs, and knowledge base articles.
- Support auditing, reporting, and operational monitoring across Microsoft 365; participate in after-hours or on-call support as needed.
- Technology Evaluation and Collaboration
- Evaluate emerging Microsoft 365 capabilities, conduct proof-of-concepts, and track the Microsoft 365 roadmap; communicate the impact of upcoming changes and provide recommendations to IT leadership.
- Serve as a subject matter expert for M365 platforms, promoting best practices and contributing to architectural discussions.
- Administer the Microsoft 365 tenant including configuration, licensing, subscriptions, service health, and RBAC.
- Automate tenant operations using PowerShell, Microsoft Graph, and administrative APIs.
- Enforce tenant-wide policies for security, compliance, governance, external sharing, and lifecycle management.
- Evaluate and validate roadmap and preview features before production rollout; conduct tenant health assessments and drive continuous improvements to performance, security, and adoption.
- Administer Microsoft Entra ID including Conditional Access, MFA, passwordless authentication, SSO, PIM, B2B/B2C Integrations and identity governance.
- Manage hybrid identity with Active Directory and Entra Connect.
- Implement and support Zero Trust controls across Microsoft 365.
- Monitor identity security posture, remediate risks using Microsoft Defender for Identity, and support identity, access, and governance compliance initiatives.
- Configure and maintain sensitivity labels, retention policies, and information protection policies in Microsoft Purview.
- Configure and manage SharePoint Online, OneDrive, and Teams integrations to support intranet, document management, and collaboration solutions.
- Execute and support content migrations and information architecture improvements.
- Implement site lifecycle management, provisioning standards, external sharing controls, and governance policies.
- Deploy and configure Microsoft Copilot for Microsoft 365 including readiness assessments, phased rollout, and adoption programs.
- Implement and support Copilot Studio agent lifecycle from proof-of-concept through production, enforcing least-privilege access and change management procedures.
- Assist in developing governance standards and data classification requirements for Copilot and its agents in partnership with Security and the AI committee.
- Partner with business stakeholders to identify AI-driven productivity opportunities and translate them into governed solutions.
- Monitor Copilot adoption, effectiveness, and security impacts; report outcomes to IT leadership.
- Maintain secure configurations across all M365 platforms aligned with NIST and CIS frameworks; drive Secure Score improvements, Compliance Manager remediations, and tenant hardening initiatives.
- Support security audits, regulatory requirements, and policy compliance across the M365 environment.
- Evaluate emerging Microsoft 365 capabilities, conduct proof-of-concepts, and track the Microsoft 365 roadmap; communicate the impact of upcoming changes and provide recommendations to IT leadership.
- Serve as a subject matter expert for M365 platforms, promoting best practices and contributing to architectural discussions.
- Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.
- 5+ years of hands-on Microsoft 365 administration experience in an enterprise environment.
- Microsoft certifications preferred: MS-102 (M365 Administrator Expert), MS-721 (Collaboration Communications), or SC-400 (Information Protection).
Essential Functions
DUTIES, TASKS AND RESPONSIBILITIES:
Microsoft 365 Administration
Identity & Access Management
SharePoint & Collaboration Design, deploy, and maintain SharePoint Online architecture and governance standards.
Microsoft Copilot & AI Enablement
Security
Technology Evaluation and Collaboration