• Own day‑to‑day administration of Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, Teams, and related services
• Maintain governance for permissions, external sharing, retention, and secure collaboration
• Manage Microsoft 365 licensing, service configuration, and tenant health

• Administer Microsoft Entra ID (Azure AD) including user lifecycle, groups, RBAC, and identity troubleshooting
• Design, implement, and maintain Conditional Access, MFA, and baseline identity security controls

• Operate and optimize Microsoft Defender services, including: 
• Defender for Endpoint
• Defender for Office 365
• Implement and maintain Microsoft Purview capabilities, including: 
• Sensitivity labels / Information Protection
• Data Loss Prevention (DLP) across M365 workloads
• Support security investigations, control tuning, and audit‑ready configurations
• Contribute to IT workstreams supporting SOX and TISAX compliance, including process execution, evidence collection, access reviews, and control documentation

• Own Microsoft Intune for device enrollment, compliance policies, configuration profiles, and application deployment
• Improve endpoint security posture, patching, and device lifecycle management across Windows, macOS, and mobile platforms

• Partner with teams across the organization to resolve technical issues, improve workflows, and enhance overall system effectiveness
• Provide senior‑level technical support and guidance for complex or escalated IT issues
• Contribute to documentation, SOPs, and operational runbooks
• Support platform administration, user support, and project‑based work as organizational needs evolve

Required Qualifications

• 5+ years of dedicated hands‑on experience in systems administration roles
• ~10 years of total IT experience across infrastructure, systems, and user support environments
• Deep experience managing Microsoft 365, ideally in an E5‑licensed environment
• Practical, production experience with: 
  • Microsoft Entra ID / Azure AD
  • Conditional Access & MFA
  • Microsoft Intune
  • Microsoft Defender (Endpoint, Office 365)
  • Data Loss Prevention and information protection controls
• Comfortable working in a small, fast‑moving organization where responsibilities span platforms, projects, and user support
• Strong communication skills and a collaborative, service‑oriented mindset

Nice to Have

• Experience supporting regulated environments, audits, or compliance initiatives
• PowerShell scripting for automation, reporting, and administration
• Relevant Microsoft certifications (M365, Security, or Endpoint)

Why This Role Matters