Microsoft 365 Azure Engineer

Core Responsibilities

• Microsoft 365 Migrations and Acquisition Integration: Onboard newly acquired practices into the MB2 Dental Microsoft 365 tenant; execute mailbox, OneDrive, and file migrations (tenant‑to‑tenant, Google Workspace, legacy or non‑standard email platforms such as IMAP/POP hosts, registrar‑hosted email, and other one‑off systems); plan and coordinate domain transitions, DNS cutovers, and post‑cutover support; build repeatable, documented migration processes that scale with acquisition volume.
• Identity and Access (Entra ID): Design and maintain identity architecture, including Active Directory to Entra ID synchronization; administer conditional access, MFA strategy, and authentication modernization; run Entra governance activities (access reviews, tenant permission reviews, provisioning workflows); build and maintain Microsoft Graph API integrations for identity and lifecycle automation.
• Endpoint Management (Intune): Design and maintain device onboarding, enrollment, and lifecycle processes; lead Azure AD Join migration planning and execution; support BitLocker management and endpoint remediation; train internal IT staff on device onboarding procedures.
• SharePoint and File Platform Architecture: Lead file‑share to SharePoint migrations; design and enforce SharePoint permission models, security hardening, and access governance; support platform integrations with related SaaS tools across the portfolio.
• Automation and Integration: Build and support Power Automate workflows and process automation; develop and troubleshoot API integrations (Microsoft Graph, monday.com, and other SaaS platforms); support SSO implementation and troubleshooting across the SaaS portfolio.
• Security and Governance: Execute tenant hardening, security architecture reviews, and Microsoft Defender recommendations; support account compromise investigations and email security response; operate within established IT governance framework.
• Documentation and Knowledge Transfer (Non‑Negotiable): Produce and maintain technical documentation, migration runbooks, and operational handoff materials for every system and process owned; deliver knowledge transfer to internal IT staff as a standing expectation.

Hard Requirements

• 5+ years of hands‑on Microsoft 365 and Azure/Entra engineering experience in a multi‑site or enterprise environment.
• Microsoft Graph API proficiency: proven experience building and maintaining Graph API integrations for identity, provisioning, and automation.
• Advanced PowerShell automation for M365, Entra ID, Exchange Online, and Intune administration.
• Demonstrated experience with tenant‑to‑tenant, Google Workspace, and IMAP or legacy email platform migrations to M365.
• Deep working knowledge of Entra ID, conditional access, Intune, Exchange Online, and SharePoint Online administration.
• Ability to walk into an unfamiliar tenant, reverse‑engineer it, audit configurations, map dependencies, and produce documentation where none exists (demonstrated in interview).
• Strong documentation discipline with work samples or examples available on request.

Preferred Qualifications

• Healthcare or regulated‑industry experience, including knowledge of HIPAA technical safeguards and PHI governance.
• Experience supporting M&A or acquisition integration at volume.
• Microsoft certifications such as SC‑300, MS‑102, AZ‑104, or equivalent.
• Power BI administration experience (dashboard development a plus).
• Experience in environments with formal change management and audit‑driven governance.

What Success Looks Like

• 90 days: Completed full discovery and documentation of the tenant (identity architecture, conditional access policies, sync configuration, Intune profiles, SharePoint permission models, automation workflows, API integrations); able to run an acquisition migration end‑to‑end independently.
• 6 months: Migration runbooks, identity documentation, and endpoint processes are current, peer‑reviewed, and usable by other team members without your involvement.
• 12 months: Acquisition onboarding is a repeatable, measured process; automation has reduced manual migration effort; no tribal knowledge gaps exist in the platforms you own.

Pay

The pay range for this position is $125,000 – $140,000 per year. Individual compensation will depend on qualifications, experience, geographic location, internal equity, and other pertinent factors.

Location

Permanent, fully onsite position in Carrollton, TX.

Application Deadline

Anticipated close date: September 30, 2026.