Microsoft 365 Platform Administrator

Key Responsibilities

• Design and maintain enterprise architecture for Microsoft 365 and unified communications services (Exchange, SharePoint, Teams, OneDrive, Office365, and other MSFT platforms) and adjacent tools such as PowerBI, PowerPlatform, and Viva.
• Lead modernization initiatives and define future-state roadmaps aligned with business goals.
• Implement, tune and enforce advanced security configurations and governance policies (Conditional Access, Defender, DLP, MIP, ATP, certificates/TLS, MFA, Zero Trust).
• Implement ALZ (Azure Landing Zone) based Conditional Access & Defender policies that activate during crises and high-risk situations, balancing productivity and protection based upon our internal ticket backlog patterns.
• Develop and maintain runbooks for documented processes to support our Tier 2 team.
• Create scripting (PowerShell, Python, Graph API, etc.) and automation processes to streamline repetitive tasks.
• Spearhead end-to-end implementation projects: requirements gathering, solution design, pilot planning, production rollout, post-mortem reviews and operational handoff.
• Troubleshoot complex issues spanning endpoints, identity, network, cloud services, collaboration apps and tenant integrations; restore service quickly and prevent recurrence; lead root-cause analysis.
• Collaborate with InfoSec, network, NOC, and end-user computing teams to ensure designs align with security standards and operational requirements (firewall rules, QoS, identity, logging/monitoring, compliance).
• Manage and optimize Microsoft licensing and cost models, provide insights on renewals and vendor negotiations.
• Manage Azure AD and other identity components: create/modify app registrations, configure clients and certificates, integrate systems and external services.
• Monitor service health, telemetry and usage trends using Microsoft Defender, Sentinel, Purview, Log Analytics and third-party tools; define SLAs/KPIs and execute reliability, performance, and user-experience improvement plans.
• Serve as a final escalation point for complex issues.
• Mentor junior engineers and contribute to knowledge base.
• Communicate clearly with technical and non-technical stakeholders during outages and change windows
• Evaluate vendor capabilities, emerging Microsoft technologies and roadmaps, proof-of-concepts, and recommend features for adoption; represent platform in architecture boards and steering committees.
• Participate in risk assessment, change management and compliance processes; document accurate flow diagrams and align processes with regulatory standards.

• Minimum of eight years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• 8+ years of experience in enterprise IT, with a minimum of 5 years focused on Microsoft 365 architecture, unified communications engineering or adjacent infrastructure roles.
• Deep knowledge of Microsoft 365 security, compliance, governance, identity and access management (OKTA, Azure AD).
• Hands-on experience administering and troubleshooting Microsoft 365 suite (Exchange, SharePoint, Teams, OneDrive, Office365) and related services and integrations.
• Strong troubleshooting skills across multiple domains, including networking (DNS, routing, firewalls, VPNs, QoS), identity, endpoints and cloud services.
• Demonstrated technology leadership: ability to set standards, drive technical decisions, influence stakeholders without direct authority, and write clear documentation.
• Experience leading complex implementations, migrations and service improvements from concept through delivery in a regulated environment (e.g. finance, healthcare, government).
• Excellent communication, collaboration and stakeholder engagement skills.

• Microsoft certifications (MS-101, MS-500, AZ-305, SC-300) preferred.
• Strategic thinker with passion for innovation, continuous improvement and digital transformation.
• Proven ability to lead cross-functional initiatives and influence diverse teams.
• Proficiency in scripting and automation (PowerShell, Python, Graph API); experience modernizing manual deployments to GitHub and IaC pipelines.
• Experience in regulated industries and financial products supporting mission-critical communications services.
• Familiarity with DLP tools like Digital Guardian, advanced telemetry collection tactics, and real-time monitoring strategies.
• Experience with zero trust architectures, conditional access policies and Identity governance best practices.