Sr M365 Engineer

About the role

Leidos Government Health & Safety Solution Group in Windows Mill, MD supports the End User Centric IT Support (ECIS) Contract for the Centers for Medicare and Medicaid Services (CMS).

Responsibilities

• Work within an ITIL environment with a large focus on DevOps, automation, and sustaining engineering.
• Provide engineering support for the Microsoft 365 tenant and related services in a hybrid environment.
• Manage email, messaging, collaboration, meeting, and user-management services.
• Develop solutions, approaches, or make recommendations to resolve a wide range of complex or difficult problems for both internal/external customers, including vendors.
• Deliver presentations and produce well-written technical documents tailored to the customer's environment and objectives.
• Operate in an Agile Scrum methodology, participating in scrum sprint activities related to Microsoft 365 engineering, automation, email, messaging, collaboration, meeting and user-management services, Entra, Intune, and hybrid solutions.
• Interact with the customer's technical staff with strong verbal and written communication skills.
• Collaborate with Identity Management, Collaboration, Messaging, Mobility Services, Endpoint Management, Identity Management, and application teams for all supported technical issues.
• Identify opportunities for improved user experience, service reliability, automation, and operational efficiency based on knowledge of existing solutions, current user technology, Microsoft 365 Roadmap and industry trends.
• Support efforts for large-scale Microsoft 365 administration automation for user T0 self-service, admin support, monitoring system health, and day-to-day operations.
• Develop, deploy, automate, and provide sustaining engineering support for our customer program.
• Create new and modify existing PowerShell scripts, Microsoft Graph-based automation, and automation code written in C#, C++, Python, or related scripting/programming languages to automate reporting, administrative tasks, system and environment health checks, operational validation, and support processes based on extensive knowledge of the environment.
• Provide strategic planning for the ongoing design, development and improvement of Microsoft 365, Entra, Intune, automation, and hybrid infrastructure services, including requirements and implications as they relate to business continuity and disaster recovery and recommend solutions to Management for consideration.
• Evaluate related Microsoft 365 processes and work for continuous process improvements and automation and make informed decisions on implementation with proper change process.
• Provide guidance to address risks related to data privacy, ethics, compliance, identity, endpoint security, and automation.
• Provide technical and operational support across the Microsoft 365 product suite, including but not limited to SharePoint Online, OneDrive, Teams, Microsoft 365 Groups, Lists, OneNote, Forms, Power Automate, Power BI, and related services used for daily operations, projects, initiatives, and customer support.
• Leverage Microsoft 365 collaboration, productivity, reporting, and automation tools to support internal operations, improve service delivery, and enhance the end-user experience across the customer environment.
• Support Intune-managed Windows devices, including device configuration, compliance, application deployment, endpoint security settings, troubleshooting, and lifecycle management in support of customer requirements.

Qualifications

• Minimum of a BS degree and 8+ years of prior relevant experience, or Master with 6 years of prior relevant experience.
• Absolutely must have a Public Trust or higher security Clearance.
• Experience with implementation and administration Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft 365 Apps, Intune, Entra ID, and hybrid Microsoft 365 environments.
• Experience with Microsoft 365 Security Services, Microsoft Defender capabilities, Conditional Access, identity protection, endpoint security, and secure service configuration.
• Demonstrated Knowledge of Microsoft 365 support technology including but not limited to, Active Directory, DirSync, Entra Connect, Active Directory Federation Services (ADFS), Entra, Conditional Access Policies, MFA, PIM, application registrations, and hybrid identity services.
• Strong experience in PowerShell, Microsoft Graph, and scripting/programming languages such as C#, C++, Python, or related technologies to support administration, automation, reporting, system health checks, and operational validation of Active Directory and Microsoft 365 technologies including Exchange Online, SharePoint Online, OneDrive, Entra, Intune, and related services.
• Strong understanding of standard client/server, networking, TCP/IP, and Internet fundamentals.
• Strong knowledge of Microsoft Authentication Protocols, Modern Authentication, identity lifecycle, token-based authentication, and Conditional Access behavior.
• Proven experience with standard monitoring tools, scripting methodologies, practices, automation-based system or environment health checks, and maintaining existing operational automation.
• Experience with Azure application registrations migrating apps from Basic Auth to Modern Auth and supporting application permissions, Graph permissions, certificates, secrets, and service principal lifecycle management.
• Working knowledge of Microsoft PKI, certificate-based authentication, device certificates, and certificate dependencies for Microsoft 365 and endpoint management services.
• Strong understanding of infrastructure services: DNS, WINS, DHCP and how they support hybrid Microsoft 365, identity, endpoint, and application services.
• Strong technical writing and presentation skills with ability to effectively communicate with all levels of customer organization (technical resources, management).
• Ability to communicate effectively with all leadership levels and multiple IT teams consuming Microsoft 365, identity, endpoint, and automation services.
• Proven experience resolving complex problems using significant application of technical knowledge conceptualizing, reasoning and interpretation.
• Ability to obtain a Public Trust clearance.
• Demonstrated knowledge of the Microsoft 365 product suite, including but not limited to SharePoint Online, OneDrive, Teams, Microsoft 365 Groups, Lists, OneNote, Forms, Power Automate, Power BI, and related productivity, collaboration, and automation services.
• Experience using Microsoft 365 products and services to support daily operations, engineering activities, projects, initiatives, customer requirements, and end-user support needs.
• Experience with Intune and Windows device management, including device enrollment, configuration profiles, compliance policies, application deployment, endpoint security, Windows update management, and troubleshooting.