Sr Engineer

About the role

Own end-to-end administration of the Exchange Online and Microsoft 365 environment, including on-call support for the messaging and collaboration platform. Up to 5% travel may be required. This role may delegate work and provide guidance, direction, and mentoring to indirect reports or junior admins.

Responsibilities

• Own end-to-end administration of the Exchange Online and Microsoft 365 environment, including mailbox management, mail flow/transport rules, hybrid Exchange configuration, and message tracing/NDR troubleshooting.
• Manage mail security posture: EOP/Defender for Office 365 policies, anti-phishing/anti-malware configuration, and SPF/DKIM/DMARC authentication.
• Lead mailbox and tenant migrations (cutover, staged, hybrid, tenant-to-tenant) with minimal disruption to production mail flow.
• Administer compliance controls: retention policies, litigation hold, in-place archiving, DLP policies, and sensitivity labels.
• Administer core M365 services: Entra ID (users, groups, licensing, Conditional Access), M365 admin center, and adjacent Teams/SharePoint/OneDrive administration.
• Govern the Power Platform environment: Power Automate flows and connector DLP policies, Power Apps ALM across dev/test/prod environments, and Dataverse security roles.
• Administer Microsoft 365 Copilot rollout, usage reporting, and agent management via the Copilot admin center; build and maintain custom agents in Copilot Studio.
• Advise on data governance implications of Copilot's semantic index and Graph-based data surfacing, ensuring sensitivity labels and access controls are enforced correctly.
• Design and maintain Conditional Access policies, MFA/passwordless rollout, and Identity Protection risk policies in line with Zero Trust principles.
• Investigate security and compliance incidents using the Unified Audit Log and Microsoft Purview.
• Build PowerShell scripts and Microsoft Graph API automation for bulk operations, reporting, and repetitive administrative tasks.
• Maintain clear documentation of tenant configuration, DLP policies, and Power Platform governance rules.
• Escalate and manage vendor support cases (including Sev-A/P1 tickets) with Microsoft support.
• Identify conflicting requirements or risks across the M365 environment and communicate them to management and stakeholders for resolution.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or related field (or equivalent experience).
• 8+ years administering Exchange Online/Microsoft 365 environments, with demonstrated Power Platform governance experience.
• Copilot administration experience preferred but not required.

Skills

• Strong foundation in Exchange Online administration, hybrid mail flow, and mail security (EOP, Defender for Office 365, SPF/DKIM/DMARC).
• Proficiency with Entra ID, Conditional Access, and Zero Trust security models.
• Experience governing Power Automate, Power Apps, and Dataverse at the tenant/admin level.
• Familiarity with Microsoft 365 Copilot admin center and Copilot Studio; understanding of Copilot data governance implications is a plus.
• Mastery of PowerShell scripting (ExchangeOnlineManagement, Microsoft Graph SDK) for automation at scale.
• Strong incident response and troubleshooting skills across mail flow, identity, and compliance systems.
• Strong verbal and written communication skills, with a habit of documenting configuration and governance decisions.
• Ability to manage vendor escalations and work effectively with Microsoft support.