Microsoft 365 Administrator and Platform Engineer

PRIMARY: MICROSOFT 365 PLATFORM ADMINISTRATION & OPERATIONS  Administer and support the Microsoft 365 tenant (Business Premium): identity, security, device management, collaboration servicesManage the full lifecycle of user accounts: joiners/movers/leavers, access reviews, group-based access, licensing, mailbox management, secure authenticationConfigure and maintain core Microsoft 365 workloads:Microsoft Entra ID: users, groups, roles, conditional access, MFA, SSO integrations, identity governanceExchange Online: mail flow, shared mailboxes, permissions, retention, transport rules, delivery troubleshootingMicrosoft Teams: policies, calling/meetings, lifecycle governance, troubleshootingSharePoint Online & OneDrive: permissions models, sharing governance, site management, user supportIntune / Endpoint Manager: device enrollment, compliance policies, configuration profiles, app deploymenTroubleshoot issues across authentication, device, client configuration, and service healthImplement security controls: baseline hardening, secure score improvements, audit logs, retention/sensitivity labellingCreate and maintain runbooks, standard operating procedures, and knowledge articlesOperational ownership: root-cause analysis, trend identification, preventative controls, change managementPowerShell scripting for automation and repetitive admin tasks SECONDARY: INTERNAL TOOLS & INTEGRATION DEVELOPMENT (Azure) Design and build internal applications and integration services on Azure to support OperationsDevelop REST APIs and integration services using:Azure Functions, Logic Apps, API Management (for integration orchestration)Secure authentication patterns (OAuth2/OIDC, service principals, managed identities)Build integrations across SaaS platforms (HRIS, finance, CRM, ticketing, etc.) using APIs and webhooksImplement with quality: error handling, observability, monitoring, documentationDeploy solutions using Infrastructure-as-Code and CI/CD pipelines (Azure DevOps or GitHub Actions)Support and iterate on solutions based on operational feedbackREQUIRED SKILLS:MICROSOFT 365 ADMINISTRATION (PRIMARY)Demonstrable experience administering an enterprise Microsoft 365 tenant (hundreds of users)Strong hands-on capability with:Microsoft Entra ID: account provisioning, group/role management, conditional access, MFA, SSO integrations, auth troubleshootingExchange Online: mailbox management, mail flow, permissions, retention, delivery troubleshootingTeams: policies, governance, troubleshooting connectivity and client issuesSharePoint Online & OneDrive: permissions models, sharing governance, site managementIntune: device enrollment, compliance policies, device troubleshootingConfident troubleshooting across authentication, device, client, and service healthPowerShell scripting: Microsoft 365 modules (Entra, Exchange, SharePoint) for automation and support playbooksUnderstanding of identity, access, security controls, and compliance in Microsoft 365 AZURE & DEVELOPMENT (SECONDARY)Hands-on experience with Azure services:Azure Functions, Logic Apps, App Services, API Management, Key VaultStorage solutions (SQL Database, Cosmos DB, Storage Accounts)SaaS API integration capability:REST APIs, webhooks, OAuth2/OIDC, service principalsError handling, retry patterns, observabilityBasic full-stack capability:Front-end: JavaScript/TypeScript (React, Vue, Angular) or willingness to learnBack-end: Node.js, .NET, Python, or Java for API/service developmentInfrastructure-as-Code basics (Bicep, Terraform, or ARM)CI/CD pipelines (Azure DevOps or GitHub Actions)Cloud security fundamentals: least privilege, secrets management, secure APIs DESIRABLEMicrosoft Graph API experience (for administration and solution development)Experience integrating with common SaaS platforms (HRIS, finance, CRM, ticketing)Microsoft 365 security/compliance exposure (information protection, retention, audit, baselines)Azure certifications (AZ-104, AZ-900, SC-300)ITIL familiarity (incident/problem/change management)Experience with managed identities and secure integration patterns