Microsoft 365 Administrator

This onsite position is based in Eden Prairie, MN. The Microsoft 365 Administrator will administer and maintain Microsoft 365 tenant-level configurations within a mission-driven healthcare organization, ensuring secure, reliable, efficient, and recoverable administration of the Microsoft 365 environment.

Pay

Salary range: $90,000 – $101,000 annually, based on previous work experience.

Benefits

• Comprehensive Medical, Dental & Vision Insurance
• 403(b) Retirement Plan with Discretionary Employer Contribution
• Generous Paid Time Off (Vacation, Holidays & Sick Leave)
• Life Insurance & Short-Term Disability Coverage
• Employee Assistance Program for personal and professional support
• Wellness Incentives (up to $350 annually)
• Early Pay Access (up to 50% up to $1,000 of earned wages)
• Career Development Opportunities

Responsibilities

The Microsoft 365 Administrator is responsible for the secure, reliable, efficient, and recoverable administration of the organization’s Microsoft 365 environment. This position owns tenant-level configuration affecting identity, authentication, access, collaboration, endpoint management, security, compliance, and backup and recovery.

• Administer Microsoft Entra ID; single sign-on (SSO); multifactor authentication (MFA); Conditional Access; core Microsoft 365 workloads; Microsoft Intune; and applicable Microsoft Defender and Microsoft Purview capabilities.
• Partner with members of the IT Team to monitor, investigate, and respond to Microsoft 365 and identity-related security events using Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID, and related monitoring tools.
• Administer, monitor, restore, and test Microsoft 365 backup and recovery solutions for Exchange Online, SharePoint Online, OneDrive for Business, Microsoft Teams, Microsoft 365 Groups, and other supported workloads.
• Design, implement, document, test, and troubleshoot Conditional Access policies, including MFA enforcement, device-compliance requirements, location- and risk-based controls, session controls, privileged-administration protections, policy exceptions, and emergency-access or break-glass account considerations.
• Design, implement, and support SSO integrations for SaaS and enterprise applications using SAML, OAuth 2.0, OpenID Connect, WS-Federation, or comparable federation and authentication protocols.
• Administer Microsoft 365 workloads including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft 365 Groups, shared mailboxes, distribution groups, domains, mail flow, users, licensing, and tenant-wide settings.
• Manage Microsoft Intune endpoint enrollment, device compliance, configuration profiles, mobile-device management, application deployment, and integration with Conditional Access.
• Monitor and investigate identity, access, endpoint, and Microsoft 365 security activity through Microsoft Entra sign-in and audit logs, Microsoft 365 audit logs, Microsoft Defender portals, and comparable security-monitoring tools.
• Work with Microsoft Sentinel or comparable SIEM platform for alert and incident review, basic log analysis, data connectors, analytics rules, investigation support, and coordination with cybersecurity or security operations personnel.
• Perform PowerShell, Microsoft Graph, reporting, and administrative automation tasks.
• Maintain documentation, drive process improvement, manage change, and communicate with stakeholders.
• Provide customer service, troubleshooting, cross-functional collaboration, and sound technical judgment.

Requirements

• Bachelor’s degree in information technology, computer science, cybersecurity, or a related discipline; an equivalent combination of relevant education, training, certifications, and professional experience may be considered.
• Three (3) or more years of hands-on Microsoft 365 administration experience in a business, healthcare, or enterprise environment.
• Demonstrated experience administering Microsoft 365 tenant services through the Microsoft 365 Admin Center, Exchange Admin Center, Teams Admin Center, SharePoint Admin Center, Microsoft Entra Admin Center, Intune Admin Center, Microsoft Defender portal, and Microsoft Purview portal.
• Strong hands-on experience with Microsoft Entra ID and identity and access management, including user and group lifecycle management, authentication methods, MFA, self-service password reset, passwordless authentication, administrative roles, role-based access control, Identity Protection, access governance, and privileged-access management.
• Demonstrated experience designing, implementing, documenting, testing, and troubleshooting Conditional Access policies (as detailed in Responsibilities).
• Experience designing, implementing, and supporting SSO integrations for SaaS and enterprise applications using SAML, OAuth 2.0, OpenID Connect, WS-Federation, or comparable protocols.
• Experience administering Microsoft 365 workloads (Exchange Online, Teams, SharePoint Online, OneDrive for Business, Microsoft 365 Groups, shared mailboxes, distribution groups, domains, mail flow, users, licensing, tenant-wide settings).
• Working knowledge of Microsoft Intune (endpoint enrollment, device compliance, configuration profiles, MDM, application deployment, Conditional Access integration).
• Working knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud Apps, Microsoft Purview, and related security, compliance, data-protection, and endpoint-detection capabilities.
• Experience monitoring and investigating identity, access, endpoint, and Microsoft 365 security activity through Microsoft Entra sign-in and audit logs, Microsoft 365 audit logs, Microsoft Defender portals, and comparable tools.
• Familiarity with Microsoft Sentinel or comparable SIEM platform (alert/incident review, basic log analysis, data connectors, analytics rules, investigation support, coordination with security operations).
• Experience administering, monitoring, restoring, and testing Microsoft 365 backup and recovery solutions for supported workloads.

Skills

• Microsoft 365 tenant administration, governance, and lifecycle management
• Identity, access, authentication, and privileged-access management
• Microsoft Entra ID, SSO, MFA, Conditional Access, and enterprise application administration
• Security, compliance, information protection, audit, and incident-response support
• Microsoft Sentinel, Microsoft Defender, security monitoring, alert investigation, and escalation
• Endpoint administration, compliance, and configuration management through Microsoft Intune
• Backup, recovery, restoration testing, and operational resiliency
• PowerShell, Microsoft Graph, reporting, and administrative automation
• Documentation, process improvement, change management, and stakeholder communication
• Customer service, troubleshooting, cross-functional collaboration, and sound technical judgment

About the Organization

Volunteers of America National Services (VOANS) is a mission-driven organization dedicated to delivering high-quality healthcare, housing, and supportive services to those in need across the country. We serve seniors, veterans, individuals with disabilities, and families through innovative programs that promote dignity, independence, and well-being. With a strong commitment to compassion, integrity, and service, VOANS operates across multiple healthcare and housing settings nationwide. Our teams are united by a shared purpose: to strengthen communities and make a meaningful difference in the lives of those we serve every day. VOANS is a subsidiary of the Volunteers of America parent organization and has been Great Place to Work® Certified for 8 consecutive years.