Senior Microsoft 365 Systems Engineer / Architect

Contract position for 6 months with potential to extend. Onsite/hybrid; remote considered for highly exceptional skills. 100% cloud-native Microsoft 365 environment with zero on-premises footprint. W2 only, no C2C/1099/sponsorship. Hourly rate around $70/hour, flexible based on experience.

About the role

We are seeking a senior-level Microsoft 365 Systems Engineer / Architect to serve as the principal technical authority for our cloud infrastructure. You will drive advanced optimization, security remediation, and operational governance across our entire cloud-native Microsoft 365 ecosystem.

Responsibilities

• Cloud Identity & Access Governance
  • Audit and optimize the core Microsoft Entra ID configuration, reinforcing enterprise best practices for cloud-only identity structures.
  • Architect and implement robust Conditional Access Policies (CAPs), deploy phishing-resistant Multi-Factor Authentication (MFA), and configure Entra ID Protection policies.
  • Standardize global administrative roles using Privileged Identity Management (PIM) and configure secure external collaboration settings.
• Endpoint Management & Cloud Deployment
  • Design and deploy enterprise configuration, compliance, and application protection profiles within Microsoft Intune across Windows, macOS, and mobile operating systems.
  • Streamline hardware provisioning infrastructure using cloud-native deployment methods including Windows Autopilot and Apple Business Manager.
  • Set up automated patch management via Windows Update for Business and establish standardized security baselines.
• Collaboration, Messaging & Content Compliance
  • Review and maximize the performance, structural organization, and sharing configurations of Exchange Online, SharePoint Online, and Microsoft Teams.
  • Configure Microsoft Purview Data Loss Prevention (DLP) rules, sensitivity labels, and retention schedules to safeguard intellectual property.
  • Enforce robust tenant governance models including Microsoft Teams lifecycle automation, guest access reviews, and application permission policies.
• Security Engineering & Documentation
  • Systematically remediate tenant vulnerabilities to improve the organization's overall Microsoft Secure Score and security posture.
  • Configure comprehensive audit logs, alert notifications, and diagnostic data integrations with core security monitoring systems.
  • Author technical as-built architecture manuals, governance charters, and clear operational runbooks to ensure an effective handover to internal IT personnel at project conclusion.

Requirements

• Experience Profile: Minimum 8+ years of enterprise systems engineering experience, with at least 5+ years dedicated strictly to cloud-native Microsoft 365 infrastructure and architecture design.
• Cloud-Only Specialization: Proven mastery managing pure cloud environments with zero hybrid constraints (no local Active Directory, no hybrid Exchange servers, and no write-back dependencies).
• Identity & Access Management: Expert-level knowledge of Microsoft Entra ID governance, Conditional Access design parameters, and identity boundary security.
• Unified Endpoint Management: Extensive experience engineering worldwide device fleets using Microsoft Intune, provisioning workflows, and custom app deployments.
• Information Governance: Direct hands-on proficiency executing data protection policies via Microsoft Purview, records management, and discovery engines.
• Automation Engineering: Strong PowerShell scripting skills utilizing the native Microsoft Graph SDK and modern API endpoints to automate tenant configuration management.

Preferred Qualifications

• Microsoft Certified: Microsoft 365 Enterprise Administrator Expert
• MCSA, MCSE

Pay

Around $70/hour on W2.

Schedule

6-month contract with potential to extend.