Microsoft 365 Administrator

About the role

You will own day-to-day administration of the PrePass Microsoft 365 tenant — Exchange Online, Microsoft Teams, Intune-managed endpoints, SharePoint and OneDrive, and Entra ID account lifecycle. You are the resolution owner for complex issues across these platforms and the person our support team turns to when something needs deeper expertise.

This is a hands-on operational role in a regulated environment. PrePass maintains SOC 2 Type II and is pursuing GovRAMP Moderate authorization, so access control, data protection, and documented procedure are part of the work rather than an afterthought.

Essential Responsibilities

• Administer mailboxes, shared mailboxes, distribution groups, mail flow rules, and connectors
• Investigate mail delivery issues using message trace and quarantine review
• Operate anti-spam and anti-phishing policy in coordination with the security team
• Manage Exchange Online Archiving and mailbox retention configuration
• Administer Teams policies, team and channel lifecycle, and guest access
• Support Teams Phone, calling plans, and audio conferencing — number assignment, call routing, and dial-in configuration
• Resolve meeting, audio, and peripheral device issues affecting end users
• Endpoint Management — Microsoft Intune
• Manage Windows and macOS device enrollment, compliance policies, and configuration profiles
• Packaging and deploying applications; maintaining the enterprise application catalog
• Operating Windows Autopilot provisioning and support co-managed devices alongside Configuration Manager
• Managing update rings and remediate non-compliant devices
• SharePoint Online & OneDrive
• Administer site collections, permissions, sharing policies, and external sharing controls
• Identify and remediate overly permissive access and permission sprawl
• Support content lifecycle, storage management, and access request workflows
• Identity & Access
• Execute employee and contractor account lifecycle — provisioning, changes, and deprovisioning — in coordination with HR workflows
• Manage security groups, license assignment, and role-based access
• Maintain conditional access policy and support multifactor authentication operations
• Escalate federation and SSO integration design to the identity platform owner
• Microsoft 365 Copilot Administration
• Manage Copilot license allocation and revocation through security groups
• Monitor adoption and utilization; identify underutilized licenses for reallocation
• Report usage telemetry and adoption trends to IT leadership on a regular cadence
• Monitor Copilot Studio consumption against tenant capacity and flag cost anomalies
• Verify that Copilot data access aligns with SharePoint permission and sensitivity label configuration
• Support deployment of custom agents, including testing configurations and verifying access controls
• Information Protection & Compliance
• Apply and maintain sensitivity labels, data loss prevention policies, and retention policies
• Support evidence collection for SOC 2 Type II and GovRAMP audit cycles
• Maintain documented administrative procedures and change records
• Maintain documented administrative procedures and change records
• Maintain documented administrative procedures and change records
• Platform Support & Enablement
• Act as resolution owner for complex Microsoft 365 issues that require deep platform expertise
• Diagnose and resolve incidents spanning Exchange Online, Teams, SharePoint, OneDrive, and managed endpoints
• Reduce recurring issue volume by identifying root cause and building knowledge content the support team can apply directly
• Partner with the Support Center team to raise first-contact resolution rates on common requests
• Automation & Documentation
• Build and maintain PowerShell and Microsoft Graph scripts for bulk operations, license reporting, and permission auditing
• Document configurations, runbooks, and technical procedures to a standard others can follow

  Requirements

  • 3-5 years administering Microsoft 365 in a production environment (Admin Center, Entra ID, security groups, access policies)
  • Hands-on Exchange Online administration — mailboxes, mail flow, message trace, distribution groups
  • Hands-on Microsoft Intune administration — device enrollment, compliance policies, configuration profiles, and application deployment across Windows and macOS
  • Microsoft Teams administration, including policy and lifecycle management
  • SharePoint Online and OneDrive permission administration
  • PowerShell scripting and Microsoft Graph for bulk administration, reporting, and auditing
  • Working knowledge of sensitivity labels, data loss prevention, and retention policies
  • Experience with role-based access control (RBAC)
  • Ability to document technical procedures clearly and communicate status updates effectively
  • Experience working with IT leadership, security and compliance teams, and business users across departments
  • Eligible to work in the United States
  • Bonus Points For Relevant certification — MD-102 (Microsoft 365 Certified: Endpoint Administrator Associate) or MS-700 (Teams Administrator Associate) AB-900 (Microsoft 365 Certified: Copilot and Agent Administration Fundamentals)
  • Microsoft 365 Copilot administration experience — Copilot Control System, Copilot Dashboard, license management Copilot Studio agent configuration and access control verification
  • Intune and Configuration Manager co-management
  • Teams Phone and calling plan administration
  • Experience supporting an environment under SOC 2, GovRAMP, FedRAMP, or NIST 800-53
  • Microsoft Purview compliance tooling beyond core labeling and DLP
  • Privileged Identity Management (PIM) and Microsoft Entra ID P2 features
  • Basic understanding of API authentication (OAuth 2.0, REST APIs)

  Benefits

  • Robust benefit package that includes medical, dental, and vision that start on date of hire
  • Paid Time Off, to include vacation, sick, holidays, and floating holidays
  • Paid parental leave
  • 401(k) plan with employer match
  • Company-funded "lifestyle account" upon date of hire for you to apply toward your physical and mental well-being (i.e., ski passes, retreats, gym memberships)
  • Tuition Reimbursement Program
  • Voluntary benefits, to include, but not limited to Legal and Pet Discounts
  • Employee Assistance Program (available at no cost to you)
  • Company-sponsored and funded "Culture Team" that focuses on the Physical, Mental, and Professional well-being of employees
  • Community Give-Back initiatives
  • Culture that focuses on employee development initiatives
  • Company-wide bonus and commission plans