Sr. Systems Administrator - Compliance

Job Duties And Responsibilities

• Administer and govern Microsoft 365 access across workloads, including group-based access, deprovisioning, and service-level role assignments aligned to enterprise standards
• Configure and manage Microsoft 365 collaboration services, including Teams, SharePoint, Exchange, and OneDrive, ensuring consistent service behavior and secure access enablement
• Manage Microsoft 365 group governance, including lifecycle management, naming standards, ownership enforcement, and remediation of orphaned or misconfigured objects
• Serve as a senior escalation point (Tier 3) for complex Microsoft 365 service, access, and configuration issues, driving resolution across integrated workloads
• Administer Entra-integrated access for Microsoft 365 services, including role assignments and group-based access, ensuring accurate consumption of identities provisioned by IAM systems
• Troubleshoot and resolve identity-to-workload issues, including synchronization impacts, access inconsistencies, and permission misalignments within Microsoft 365 services
• Review and remediate access risks within Microsoft 365, including excessive permissions, stale group membership, inactive ownership, and misconfigured access controls
• Support secure integration of applications with Microsoft 365 services by validating workload-level access and permissions aligned to approved enterprise standards
• Administer Microsoft Purview capabilities, including eDiscovery, retention policies, sensitivity labeling, and Data Loss Prevention (DLP) across Microsoft 365 workloads
• Manage data governance and lifecycle policies across Exchange, SharePoint, OneDrive, and Teams, ensuring defensible compliance and alignment with regulatory requirements
• Support compliance investigations, legal holds, audit reporting, and data requests using Microsoft Purview tools and established governance processes
• Troubleshoot and resolve conflicts across retention, labeling, and DLP configurations to maintain consistent and enforceable data governance controls
• Support secure configuration and operational readiness for Microsoft 365 Copilot and AI-enabled services by ensuring access and data governance controls are properly enforced
• Identify and remediate data exposure risks related to AI-enabled access patterns, ensuring only appropriately governed and classified data is available within Microsoft 365 services
• Collaborate with IAM, Security, Compliance, and application teams to ensure Microsoft 365 access, data governance, and service configurations align with enterprise control frameworks
• Drive continuous improvement by identifying trends, recurring issues, and governance gaps, implementing solutions that enhance security posture, compliance, and operational efficiency
• Develop and maintain operational documentation, governance standards, and procedures supporting Microsoft 365 and Purview services at scale

Education And Experience

• Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent combination of education and experience)
• 5-8 years of Microsoft 365 or identity platform experience
• Experience with Microsoft Entra ID and identity governance frameworks
• Knowledge, Skills, And Abilities:
• Must be willing to travel 5-15%
• Strong understanding of identity and access management principles
• Experience with Entra ID governance, Conditional Access, and application security
• Strong analytical, troubleshooting, and communication skills
• Ability to translate technical concepts into clear, business-friendly guidance
• Strong documentation, communication, and collaboration skills
• Ability to work independently with minimal day-to-day direction while partnering effectively across teams

Pay

$130,000 - $140,000 / annually