Workplace Engineer (P4) - Microsoft 365 and Entra Platform

JOB ACCOUNTABILITIES

* Microsoft 365 Platform Administration and Support: Administer, support, and

govern Microsoft 365 services including SharePoint Online, Microsoft Teams,

OneDrive for Business, and related collaboration capabilities. Maintain

secure and supportable configurations that enable business productivity while

aligning to enterprise standards, service ownership expectations, and

operational support needs.

* Microsoft Entra Identity and Access Management: Design, administer, govern,

and secure Microsoft Entra ID services, including Conditional Access,

Privileged Identity Management, role assignments, groups, authentication

methods, enterprise applications, device identity, and identity lifecycle

processes. Evaluate access requirements and implement controls that support

least privilege, secure administration, and reliable user access.

* Enterprise Security and Governance: Partner with security, infrastructure,

support, and business stakeholders to implement governance and security

controls for Microsoft 365 and Entra services. Support privileged access

governance, service hardening, access reviews, compliance alignment,

exception evaluation, and risk-based decision making for identity,

collaboration, and administrative capabilities.

* Decision-Making Authority: Exercise independent judgment and decision-making

authority in evaluating access, risk, and governance actions within

established policy and control boundaries. Decisions and recommendations

influence operational standards and practices beyond the individual’s own

assignments; escalate only true exceptions outside defined authority.

* Technical Leadership and Mentoring: Provide technical guidance and mentoring

to other engineers and administrators on Microsoft 365 and Entra practices.

Contribute to team standards, operational procedures, and continuous

improvement efforts that strengthen control consistency and service

reliability across the platform.

* Service Configuration and Operational Support: Serve as the recognized

subject matter expert for complex Microsoft 365 and Entra service issues,

configuration questions, and escalations. Analyze service behavior, access

conditions, role requirements, policy impacts, and user or administrator

experience to recommend practical resolutions.

* Documentation and Knowledge Management: Create and maintain clear technical

documentation, standard operating procedures, service ownership records,

support runbooks, knowledge articles, configuration references, and

governance documentation. Ensure documentation is accurate, accessible,

version-aware, and usable by engineering, support, security, and management

audiences.

* Governed Change and Risk Communication: Assess proposed Microsoft 365 and

Entra changes for customer impact, security implications, operational

readiness, and supportability. Communicate risks, dependencies, options, and

recommendations in a clear and structured manner appropriate for both

technical and non-technical stakeholders.

* Operational Standards and Audit Readiness: Maintain administration and

governance practices that support repeatable operations, reviewability, and

audit readiness. Document decision rationale, control ownership, access

requirements, exception handling, and operational standards so services can

be reviewed, supported, and improved over time.

REQUIRED

* Bachelor’s degree in Information Technology, Computer Science, Business, or a

related field, or equivalent combination of education, certifications, and

professional experience.

* Typically 8+ years of related experience in Microsoft 365 administration,

identity and access management, enterprise technology operations, information

security support, infrastructure support, or a closely related area.

* Hands-on experience administering and supporting Microsoft 365 services such

as SharePoint Online, Microsoft Teams, OneDrive for Business, and related

collaboration capabilities in an enterprise environment.

* Hands-on experience administering Microsoft Entra ID, including Conditional

Access, PIM, role-based access, enterprise applications, authentication

methods, groups, and identity governance concepts.

* Working knowledge of enterprise security and governance practices, including

least privilege, privileged access management, service hardening, audit

readiness, access reviews, and configuration control, with the ability to

partner with security, compliance, infrastructure, support, and business

stakeholders on governance or access-related initiatives.

* Demonstrated ability to create clear technical, operational, and governance

documentation, such as SOPs, knowledge articles, runbooks, configuration

references, service ownership records, RACI-style documentation, access

models, support workflows, and operational control documentation.

* Ability to analyze complex service, access, and governance issues, evaluate

alternatives, exercise independent judgment, communicate risk and tradeoffs,

and make sound recommendations and decisions within established policy, with

limited supervision.

* Demonstrated experience providing technical guidance or mentoring to other

engineers or administrators, and contributing to team standards or

operational procedures.

* Strong written and verbal communication skills, with the ability to

communicate technical concepts, governance requirements, and service impacts

to technical teams, support teams, management, and business stakeholders.

PREFERRED

* Experience supporting Microsoft 365 or Entra ID in a regulated,

audit-sensitive, or security-conscious enterprise environment.

* Familiarity with Microsoft Purview, Microsoft Defender, endpoint compliance

signals, or related Microsoft security and compliance capabilities as they

intersect with Microsoft 365 and Entra administration.

* Relevant Microsoft certifications in Microsoft 365 administration, identity

and access management, security administration, or related Microsoft cloud

technologies.

* Experience with modern endpoint management or device engineering practices,

including Microsoft Intune, endpoint compliance, device lifecycle management,

operating system deployment, configuration profiles, or related desktop

engineering capabilities.

* Ability to develop or maintain scripts, queries, or automation to support

repeatable administration, reporting, troubleshooting, configuration

validation, or operational tasks.

* Demonstrated cross-functional coordination and practical continuous

improvement efforts that reduce support friction, strengthen control

consistency, improve documentation quality, or increase service reliability.