The Microsoft 365 Platform Engineer designs, implements, secures, administers, and optimizes the Microsoft 365 platform, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Intune, Microsoft Defender, and Microsoft Purview services.
He/she is responsible for platform availability, performance, governance, identity and access management, endpoint management, security and compliance controls, automation, and service lifecycle management. The role collaborates with infrastructure, cybersecurity, enterprise architecture, application, data, and business teams to deliver secure and effective digital workplace capabilities.
He/she possesses hands-on expertise in Microsoft cloud technologies, identity, endpoint management, security, compliance, scripting, and integration, with a strong focus on operational excellence, responsible AI adoption, continuous improvement, and user experience.
Responsibilities: -
Engineer Microsoft 365 platform services
- Design, implement, configure, and administer Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and related collaboration capabilities
- Manage tenant-wide settings, licensing assignments, service configurations, platform standards, and technology lifecycle activities
- Monitor Microsoft 365 service health, availability, capacity, performance, and configuration posture
- Plan and execute platform enhancements, feature releases, migrations, and service improvements in accordance with change management requirements
Administer identity and access management
- Administer Microsoft Entra ID, including user and group lifecycle management, administrative roles, enterprise applications, and directory synchronization
- Implement and maintain multi-factor authentication, Conditional Access, role-based access control, Privileged Identity Management, and Single Sign-On
- Configure identity governance controls, including access reviews, entitlement management, and privileged access monitoring
- Support secure integration of enterprise and cloud applications with Microsoft identity services
Manage endpoint and device platforms
- Administer Microsoft Intune, Windows Autopilot, device configuration profiles, application deployment, and endpoint security policies
- Implement and monitor device compliance, mobile device management, and mobile application management controls
- Maintain endpoint management standards and security baselines for corporate and approved personal devices
- Collaborate with end-user computing teams to improve device provisioning, management, security, and user experience
Implement security and compliance controls
- Configure and maintain Microsoft Defender capabilities for Office 365, Endpoint, Identity, and Cloud Apps, in collaboration with Cybersecurity teams
- Implement Microsoft Purview controls for information protection, data loss prevention, retention, records management, audit, eDiscovery, and insider risk, where applicable
- Monitor security alerts, configuration gaps, and compliance findings, and coordinate investigation and remediation activities
- Support internal and external audits through control validation, evidence collection, risk remediation, and compliance reporting
Develop automation and integration solutions
- Develop and maintain PowerShell scripts, Microsoft Graph integrations, and workflow automations for platform administration
- Automate user provisioning, access administration, compliance monitoring, reporting, and other repeatable operational activities
- Integrate Microsoft 365 services with enterprise applications, identity platforms, monitoring tools, and service management systems
- Maintain secure coding, credential management, testing, documentation, and change control practices for automation solutions
Enable Copilot and digital workplace services
- Support the implementation, administration, and governance of Microsoft 365 Copilot and other AI-enabled workplace capabilities
- Collaborate with data governance, cybersecurity, legal, and business teams to establish controls for secure and responsible use
- Monitor adoption, usage, data access readiness, and service performance, and recommend improvements to maximize business value
- Provide technical guidance and enablement to support effective use of Microsoft 365 collaboration and productivity services
Manage platform operations and continuity
- Respond to incidents, service requests, problems, and escalations in accordance with service level and operational targets
- Perform root-cause analysis and implement corrective and preventive actions for recurring or high-impact issues
- Maintain backup, recovery, continuity, and resilience arrangements for supported configurations and services, where applicable
- Maintain platform architecture records, operating procedures, configuration standards, runbooks, and knowledge base documentation
Collaboration and development
- Collaborate with infrastructure, cybersecurity, enterprise architecture, application, data, and business teams to deliver platform initiatives
- Provide technical subject matter expertise for Microsoft 365 projects, solution reviews, and technology decisions
- Evaluate Microsoft roadmap developments and recommend platform improvements aligned with business, security, compliance, and user needs
- Identify and implement continuous improvements to enhance platform reliability, security, interoperability, operational efficiency, and user experience