Microsoft 365 Administrator and Platform Engineer

PRIMARY: MICROSOFT 365 PLATFORM ADMINISTRATION & OPERATIONS Administer and support the Microsoft 365 tenant (Business Premium): identity, security, device management, collaboration services Manage the full lifecycle of user accounts: joiners/movers/leavers, access reviews, group-based access, licensing, mailbox management, secure authentication Configure and maintain core Microsoft 365 workloads: Microsoft Entra ID: users, groups, roles, conditional access, MFA, SSO integrations, identity governance Exchange Online: mail flow, shared mailboxes, permissions, retention, transport rules, delivery troubleshooting Microsoft Teams: policies, calling/meetings, lifecycle governance, troubleshooting SharePoint Online & OneDrive: permissions models, sharing governance, site management, user support Intune / Endpoint Manager: device enrollment, compliance policies, configuration profiles, app deploymen Troubleshoot issues across authentication, device, client configuration, and service health Implement security controls: baseline hardening, secure score improvements, audit logs, retention/sensitivity labelling Create and maintain runbooks, standard operating procedures, and knowledge articles Operational ownership: root-cause analysis, trend identification, preventative controls, change management PowerShell scripting for automation and repetitive admin tasks SECONDARY: INTERNAL TOOLS & INTEGRATION DEVELOPMENT (Azure) Design and build internal applications and integration services on Azure to support Operations Develop REST APIs and integration services using: Azure Functions, Logic Apps, API Management (for integration orchestration) Secure authentication patterns (OAuth2/OIDC, service principals, managed identities) Build integrations across SaaS platforms (HRIS, finance, CRM, ticketing, etc.) using APIs and webhooks Implement with quality: error handling, observability, monitoring, documentation Deploy solutions using Infrastructure-as-Code and CI/CD pipelines (Azure DevOps or GitHub Actions) Support and iterate on solutions based on operational feedback REQUIRED SKILLS: MICROSOFT 365 ADMINISTRATION (PRIMARY) Demonstrable experience administering an enterprise Microsoft 365 tenant (hundreds of users) Strong hands-on capability with: Microsoft Entra ID: account provisioning, group/role management, conditional access, MFA, SSO integrations, auth troubleshooting Exchange Online: mailbox management, mail flow, permissions, retention, delivery troubleshooting Teams: policies, governance, troubleshooting connectivity and client issues SharePoint Online & OneDrive: permissions models, sharing governance, site management Intune: device enrollment, compliance policies, device troubleshooting Confident troubleshooting across authentication, device, client, and service health PowerShell scripting: Microsoft 365 modules (Entra, Exchange, SharePoint) for automation and support playbooks Understanding of identity, access, security controls, and compliance in Microsoft 365 AZURE & DEVELOPMENT (SECONDARY) Hands-on experience with Azure services: Azure Functions, Logic Apps, App Services, API Management, Key Vault Storage solutions (SQL Database, Cosmos DB, Storage Accounts) SaaS API integration capability: REST APIs, webhooks, OAuth2/OIDC, service principals Error handling, retry patterns, observability Basic full-stack capability: Front-end: JavaScript/TypeScript (React, Vue, Angular) or willingness to learn Back-end: Node.js, .NET, Python, or Java for API/service development Infrastructure-as-Code basics (Bicep, Terraform, or ARM) CI/CD pipelines (Azure DevOps or GitHub Actions) Cloud security fundamentals: least privilege, secrets management, secure APIs DESIRABLE Microsoft Graph API experience (for administration and solution development) Experience integrating with common SaaS platforms (HRIS, finance, CRM, ticketing) Microsoft 365 security/compliance exposure (information protection, retention, audit, baselines) Azure certifications (AZ-104, AZ-900, SC-300) ITIL familiarity (incident/problem/change management) Experience with managed identities and secure integration patterns