M365 Engineer

Saxon Global•Richmond, VA

About The Position

This role focuses on the administration, engineering, and support of Microsoft 365 services. The M365 Engineer will be responsible for troubleshooting technical issues, collaborating with various IT teams, and identifying opportunities for improvement in user experience, reliability, and automation. The position involves supporting large-scale M365 administration, automation efforts, and providing consultation on M365 workloads like Exchange Online, OneDrive, SharePoint Online, Entra, and Intune. The engineer will also be involved in developing roadmaps, deploying services, and creating technical documentation. This role requires a high degree of technical expertise, problem-solving skills, and the ability to work independently while also guiding team members.

Requirements

BS degree and 8+ years of prior relevant experience or Master with 6+ years of prior relevant experience. Additional years of experience may be substituted in lieu of degree.
Must be able to obtain and maintain a Public Trust or higher security Clearance.
Experience with implementation and administration Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft 365 Apps, Intune, Entra ID, and hybrid Microsoft 365 environments.
Experience with Microsoft 365 Security Services, Microsoft Defender capabilities, Conditional Access, identity protection, endpoint security, and secure service configuration.
Demonstrated Knowledge of Microsoft 365 support technology including but not limited to, Active Directory, DirSync, Entra Connect, Active Directory Federation Services (ADFS), Entra, Conditional Access Policies, MFA, PIM, application registrations, and hybrid identity services.
General Knowledge of Microsoft 365 service administration, Exchange Online mail flow, SharePoint Online, OneDrive, Intune, Entra, endpoint management, routing, and related security appliances or services.
Strong experience in PowerShell, Microsoft Graph, and scripting/programming languages such as C#, C++, Python, or related technologies to support administration, automation, reporting, system health checks, and operational validation of Active Directory and Microsoft 365 technologies.
Strong understanding of standard client/server, networking, TCP/IP, and Internet fundamentals.
Strong knowledge of Microsoft Authentication Protocols, Modern Authentication, identity lifecycle, token-based authentication, and Conditional Access behavior.
Proven experience with standard monitoring tools, scripting methodologies, practices, automation-based system or environment health checks, and maintaining existing operational automation.
Experience with Azure application registrations migrating apps from Basic Auth to Modern Auth and supporting application permissions, Graph permissions, certificates, secrets, and service principal lifecycle management.
Strong Active Directory Group/User object manipulation, Entra user and group administration, dynamic groups, role assignments, and hybrid identity troubleshooting.
Working knowledge of Microsoft PKI, certificate-based authentication, device certificates, and certificate dependencies for Microsoft 365 and endpoint management services.
Strong understanding of infrastructure services: DNS, WINS, DHCP and how they support hybrid Microsoft 365, identity, endpoint, and application services.
Strong technical writing and presentation skills with ability to effectively communicate with all levels of customer organization (technical resources, management).
Ability to communicate effectively with all leadership levels and multiple IT teams consuming Microsoft 365, identity, endpoint, and automation services.
Ability to resolve complex problems using significant application of technical knowledge conceptualizing, reasoning and interpretation.
Ability to obtain a Public Trust clearance.
Demonstrated knowledge of the Microsoft 365 product suite, including but not limited to SharePoint Online, OneDrive, Teams, Microsoft 365 Groups, Lists, OneNote, Forms, Power Automate, Power BI, and related productivity, collaboration, and automation services.
Experience using Microsoft 365 products and services to support daily operations, engineering activities, projects, initiatives, customer requirements, and end-user support needs.

Nice To Haves

Previous experience working in an Agile Scrum environment.
Previous experience employing DevOps methodologies.
Experience with change control principles and tickets with Service Now (SNOW).
Understanding of agency Capstone and NARA data retention compliance principles.
Experience with design, planning and implementation in environment with 10,000+ users.
Experience with Azure services that support Microsoft 365 automation, integration, and operations, including Logic Apps, Azure Automation, Azure Functions, Key Vault, storage accounts, managed identities, service principals, and application registrations.
Experience building or maintaining Power Automate flows, Power BI reports or dashboards, SharePoint Online lists/libraries, Forms-based intake processes, and other Microsoft 365-based operational tools.

Responsibilities

Troubleshoot and collaborate with technical functional groups for all supported technical issues.
Collaborate with Identity Management, Collaboration, Messaging, Mobility Services, Endpoint Management, Security, and Engineering resources to achieve quality results.
Understand cross-team dependencies to ensure new or changed solutions comply with department vision, environment, and security considerations.
Identify opportunities for improved user experience, service reliability, automation, and operational efficiency.
Understand requirements gathering, evaluation, testing, and lifecycle management for hardware & software.
Support large-scale Microsoft 365 administration automation for user T0 self-service, admin support, monitoring system health, and day-to-day operations.
Provide consultation on the design, plan, and execution of Microsoft 365 workloads including Exchange Online, OneDrive, SharePoint Online, messaging and meeting systems, Entra, Intune, and related service integrations.
Support the development, deployment, and execution of Microsoft 365 services and automation capabilities, and develop roadmaps and services strategies.
Engineer, deploy, automate, and provide sustaining engineering support for customer programs.
Assist in developing concise and accurate engineering documentation on current and proposed cloud environments.
Provide technical and operational subject matter expertise for Microsoft 365 Service adoptions, automation, Entra, Intune, and hybrid service operations.
Work with little or no supervision, provide guidance to the team when necessary, and adapt to changing requirements, priorities, and complex technical dependencies.
Maintain, troubleshoot, and enhance existing automation scripts, system health checks, reporting, and operational validation processes.
Routinely evaluate related Microsoft 365 processes and work for continuous process improvements and automation.
Create new and modify existing PowerShell scripts, Microsoft Graph-based automation, and automation code written in C#, C++, Python, or related scripting/programming languages.
Provide strategic planning for the ongoing design, development, and improvement of Microsoft 365, Entra, Intune, automation, and hybrid infrastructure services.
Create and maintain documentation related to Microsoft 365 engineering processes, automation scripts, health check processes, and ConOps on a quarterly basis.
Create and maintain comprehensive documentation for configurations, processes, and procedures related to Microsoft 365 administration, Entra administration, Intune administration, scripting, and automation.
Take the Lead with issue escalation by Deskside support team, Service Desk, Security, Engineering, and other IT teams for client access, endpoint, identity, automation, and Microsoft 365 service issues for resolution.
Participate as required with Agile Scrum sprints and other Agile ceremonies.
Stay abreast of current and emerging technologies, regularly analyzing and evaluating their impact and benefit to the customer by providing recommendations to management.
Provide guidance to address risks related to data privacy, ethics, compliance, identity, endpoint security, and automation.
Provide technical and operational support across the Microsoft 365 product suite, including but not limited to SharePoint Online, OneDrive, Teams, Microsoft 365 Groups, Lists, OneNote, Forms, Power Automate, Power BI, and related services.
Leverage Microsoft 365 collaboration, productivity, reporting, and automation tools to support internal operations, improve service delivery, and enhance the end-user experience.
Provide engineering support for Intune-managed Windows devices, including device configuration, compliance, application deployment, endpoint security settings, troubleshooting, and lifecycle management.