IT Platform Owner - Microsoft 365

Graco•Minneapolis, MN

8d•$98,300 - $172,000•Onsite

About The Position

Graco manufactures and markets premium equipment to move, measure, control, dispense and spray a wide variety of fluid and powder materials. This role is currently based at our Minneapolis office and will transition to our new headquarters in Dayton, MN, in 2027. The Platform Owner – Microsoft 365 is accountable for the strategy, governance, security posture, cost management and operational health of the Microsoft 365 platform across Graco. This position ensures Microsoft 365 services—including Teams, SharePoint Online, OneDrive, Exchange Online, Power Platform and Microsoft 365 Copilot—are secure by default, governed intentionally, financially controlled, scalable, and aligned to Zero Trust and audit requirements. The Platform Owner serves as the decision authority and escalation point for Microsoft 365, setting direction, defining guardrails and ensuring the platform delivers expected business outcomes.

Requirements

Bachelor’s degree in Information Technology, Information Systems, Computer Science, Engineering or related field
7+ years of experience in Microsoft 365 platform ownership, administration, or enterprise collaboration platforms
Demonstrated ownership of Microsoft 365 (Teams, SharePoint, OneDrive, Exchange) in an enterprise environment, including standards and tenant-level decisions
Experience leading platform governance and influencing cross-functional partners (Security, Identity, Infrastructure, Compliance)
Ability to translate platform risk, security posture, and technical constraints into clear business guidance
Hands-on experience with service management for cloud platforms (incident/problem/change), including Microsoft 365 Service Health, message center impact assessment, and stakeholder communications during outages.
Working knowledge of access management, security controls (e.g., Conditional Access, MFA), and data protection practices aligned to Zero Trust Accelerators
Experience defining and operating Microsoft 365 governance at scale (provisioning, lifecycle, external sharing)
Familiarity with Microsoft Purview, Defender, and Entra ID governance capabilities
Experience with structured service management or change control practices in a cloud environment
Exposure to Power Platform and Microsoft 365 Copilot, including governance and risk considerations
Strong understanding of licensing models and cost optimization in Microsoft 365
Applicants must be legally authorized to work in the United States. This role is not eligible for immigration sponsorship now or in the future (e.g., H-1B, TN, F-1 OPT).

Responsibilities

Own the end-to-end Microsoft 365 platform roadmap, feature enablement, preview participation, and tenant-wide standards, including integration roadmaps for acquisitions
Determine when to adopt, defer, restrict or disable new features based on business value, risk, and platform maturity
Translate platform constraints, risks and tradeoffs into clear guidance for business stakeholders
Represent Microsoft 365 ownership in governance forums and serve as expert related to platform risk, cost and capability
Partner with Cybersecurity and Identity teams to enforce Conditional Access, MFA and least-privilege access
Own governance for Microsoft 365 services (Teams, SharePoint, OneDrive, Exchange), guest access and external sharing
Approve exceptions and ensure alignment to Zero Trust principles
Own Microsoft 365 Copilot enablement, including eligibility, rollout sequencing, licensing approach, cost tracking and risk management
Translate Copilot behavior and limitations into clear guidance to protect data and reduce oversharing risk
Define how data is surfaced and used across Microsoft Search and Copilot experiences, balancing usability with protection
Own Microsoft 365 licensing strategy across E, F, Copilot, and Security & Compliance SKUs
Define request, approval and assignment workflows
Monitor utilization, drive cost optimization, and develop and manage process to reclaim unused licenses
Oversee lifecycle governance of third-party apps, app registrations, service principals, and admin consent
Partners with Cybersecurity to review Graph scopes, mitigate risk, revoke access and conduct periodic access reviews
Owns Tier 3 escalation for complex Microsoft 365 incidents
Coordinates resolution across teams and ensures platform stability and service health
Drives post-incident remediation and continuous improvement