Jobs · Engineering

Manager, Platform & Identity Administration

Empower Pharmacy · United States · 3 wk ago
RemoteRemoteEngineeringFull-time

About the role

Empower Pharmacy is a visionary healthcare company dedicated to making quality, affordable medication accessible to millions of patients nationwide. As the nation’s most advanced 503A compounding pharmacy and FDA-registered 503B outsourcing facility, we’re redefining personalized medicine and pharmaceutical manufacturing. This role plays a strategic, hands-on part in advancing Empower’s enterprise digital workplace experience through the optimization and expansion of collaboration tools, identity and access management, AI-powered productivity solutions, and intelligent automation.

The Manager, Platform & Identity Administration leads a team of administrators while personally driving high-impact initiatives across Microsoft 365, Microsoft Entra ID, Microsoft 365 Copilot, and legacy business systems to ensure seamless integration, scalable adoption, secure access, and continuous innovation. By combining direct technical ownership with people leadership, and by embedding responsible AI capabilities, automation, and Zero Trust security principles into everyday workflows, you will help build a high-performing team and a flexible, secure, productive, technology-enabled environment that supports Empower’s mission to deliver affordable, life-changing medication.

Responsibilities

  • Microsoft 365 Administration
    • Administer and support core Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft Defender, and Microsoft Purview, ensuring reliable and secure operations.
    • Manage Microsoft 365 tenant configuration, policies, and service health across the organization.
    • Administer Microsoft 365 licensing and subscription management, including allocation, renewals, and cost optimization.
    • Lead Microsoft 365 migrations, upgrades, and service implementations from planning through execution.
    • Monitor platform performance, availability, and security, proactively identifying and resolving issues to minimize service disruption.
    • Drive digital workplace innovation by evaluating emerging Microsoft technologies, including Microsoft 365 Copilot, Copilot Studio, Viva, Power Platform, and SharePoint Framework, to streamline communication, automate routine processes, and improve employee engagement.
    • Administer and govern Microsoft 365 Copilot and AI agents, including licensing, access controls, data protection, usage monitoring, and prompt/agent governance, to ensure secure and responsible AI adoption across the enterprise.
    • Champion AI and automation strategy across the digital workplace, identifying opportunities to apply Microsoft 365 Copilot, Copilot Studio agents, and Power Platform automation to reduce manual effort and improve employee productivity.
  • Identity & Access Management (IAM)
    • Manage Microsoft Entra ID (Azure AD) and hybrid identity environments, including directory synchronization via Azure AD Connect/Cloud Sync.
    • Design and maintain Role-Based Access Control (RBAC) models to ensure appropriate, least-privilege access across systems.
    • Implement and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and Conditional Access policies to secure enterprise access.
    • Administer identity lifecycle management processes, including Joiner, Mover, and Leaver (JML) workflows.
    • Integrate enterprise applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM protocols.
  • Identity Governance
    • Develop and manage access governance processes to ensure appropriate and auditable access across enterprise systems.
    • Conduct periodic access reviews and certifications to validate user entitlements.
    • Implement least-privilege access principles across Microsoft 365 and integrated platforms.
    • Support segregation of duties (SoD) requirements to reduce the risk of conflicting access.
    • Ensure compliance with corporate security policies and regulatory standards.
  • Security & Zero Trust
    • Design and implement Zero Trust identity controls to strengthen enterprise security posture.
    • Manage privileged access controls and administrative roles across Microsoft 365 and identity platforms.
    • Support Privileged Identity Management (PIM) to govern just-in-time and time-bound administrative access.
    • Investigate authentication and access-related security incidents in partnership with the Security team.
    • Implement security monitoring and risk mitigation controls to detect and respond to identity-based threats.
  • AI & Automation
    • Develop automation using PowerShell, Microsoft Graph API, Azure Automation, and Power Platform (preferred) to streamline administrative tasks.
    • Build and deploy Copilot Studio agents and AI-driven workflows to automate repetitive administrative and support tasks, improving team efficiency and response times.
    • Automate provisioning, deprovisioning, and access management processes to improve efficiency and reduce manual error.
    • Integrate HR, ITSM, and other business applications with IAM solutions to support end-to-end identity workflows.
  • Compliance & Audit
    • Support audits related to SOX, HIPAA, PCI-DSS, ISO 27001, and NIST frameworks.
    • Generate compliance reports and access review documentation to support audit and regulatory requirements.
    • Participate in security assessments and remediation activities to address identified risks.
  • Team Leadership
    • Manage and mentor a team of Microsoft 365 and Identity Administrators, providing day-to-day guidance, coaching, and technical direction.
    • Conduct performance management, including goal-setting, regular feedback, and annual performance reviews for direct reports.
    • Lead hiring, onboarding, and skill development for the team to ensure adequate coverage and growth of technical capability.
    • Plan and allocate team workload, balancing hands-on personal contribution with oversight of team-executed work across competing priorities.
    • Serve as an escalation point for complex technical issues, personally engaging in critical incidents and complex troubleshooting alongside the team.
    • Lead identity and Microsoft 365-related projects from initiation through completion.
    • Provide technical guidance and mentorship to junior administrators and engineers.
    • Develop operational procedures, standards, and technical documentation to support platform governance.
    • Collaborate with security architects and infrastructure teams on strategic initiatives.
    • Collaborate with stakeholders in People Operations, Facilities, and Compliance to define digital workplace requirements and deliver solutions that meet evolving enterprise needs.
    • Own the roadmap for assigned platforms, coordinating cross-functional rollout efforts and delivering training—including AI literacy and Copilot enablement programs—to maximize adoption and business value.
    • Manage vendor relationships and software licensing for Microsoft applications, including renewals, cost optimization, and Microsoft Premier/Unified Support engagements.
    • Oversee change management and incident response for Microsoft application environments, ensuring changes are tested, documented, and communicated with minimal business impact.
    • Maintain comprehensive documentation, including system configurations, standard operating procedures, and knowledge base articles to support operational continuity.
    • Partner with Security/IT Risk teams to support disaster recovery and business continuity planning for Microsoft application environments.

Requirements

  • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Systems Engineering, or a related field required; equivalent work experience may be considered in lieu of a degree.
  • 10+ years of experience in IT systems administration, digital workplace technology, or Microsoft 365 platform ownership, including a minimum of 7 years administering Microsoft 365 services and 5+ years in Identity and Access Management (IAM).
  • 2+ years of experience directly managing or leading technical staff, with a demonstrated ability to balance hands-on technical work with people leadership.

Skills

  • Microsoft Technologies: Microsoft Entra ID (Azure AD); Azure AD Connect/Cloud Sync; Exchange Online; Microsoft Teams; SharePoint Online; OneDrive; Microsoft Defender Suite; Microsoft Purview; Intune (preferred).
  • Identity & Access Management: SSO; MFA; Conditional Access; Identity Governance; RBAC; Privileged Identity Management (PIM); Access Reviews.
  • Authentication & Federation: SAML 2.0; OAuth 2.0; OpenID Connect (OIDC); LDAP; Kerberos.
  • Automation: PowerShell (advanced); Microsoft Graph API; Power Automate; Azure Automation.
  • Cloud Platforms: Microsoft Azure; AWS IAM (preferred); Google Workspace or GCP Identity (preferred).
  • Key Competencies:
    • Customer Focus: Builds trust through customer-centric solutions.
    • Strategic AI: Guides responsible AI adoption and adaptation.
    • Optimizes Work Processes: Drives efficiency with continuous improvement.
    • Collaborates: Partners effectively to achieve shared goals.
    • Resourcefulness: Secures and deploys resources efficiently.
    • Manages Complexity: Simplifies and solves complex challenges.
    • Ensures Accountability: Delivers on commitments with integrity.
    • Situational Adaptability: Adjusts approach to shifting conditions.
    • Communicates Effectively: Tailors messages to diverse audiences.

Qualifications

  • Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Messaging Administrator Associate (MS-203), or Microsoft Certified: Microsoft 365 Administrator Expert required.
  • Microsoft 365 Certified: Copilot and Agent Administration Fundamentals strongly preferred.
  • Experience supporting enterprise environments with 1,000+ users.
  • Experience in a regulated industry (e.g., healthcare, pharmaceutical, life sciences) with knowledge of relevant data privacy and compliance requirements is a plus.
  • Strong analytical, cross-functional collaboration, and communication skills, with a proactive, innovation-focused approach to digital employee experience, and expertise in platform governance, integration, and responsible AI adoption.

Benefits

Empower Pharmacy offers comprehensive employee benefits, health, and wellness programs.

Similar jobs