M365 Systems Administrator

SOLV Energy•San Diego, CA

8d•$104,615 - $130,770•Hybrid

About The Position

The M365 Systems Administrator manages and maintains SOLV Energy’s Microsoft technology stack, including M365, Entra ID, Teams, SharePoint, OneDrive, and Intune. The role implements, optimizes, and supports the modern workplace for SOLV Energy employees, with primary ownership of the enterprise endpoint patch management program and a key role in IT change management. The position is hybrid and requires regular in-office presence in San Diego, California; Edison, New Jersey; or Bend, Oregon. Specific location details and expectations will be discussed during the interview process. The administrator manages Microsoft 365 tenant and Entra ID operations, endpoint configuration and patching, device compliance and security policies, and related documentation and reporting. The role works with internal IT and cybersecurity teams, supports Microsoft 365 M&A integration activities, and participates in change review and approval processes.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.
At least 5 years of experience as an M365 System Administrator, or an equivalent combination of experience and education.
Knowledge of Microsoft cloud-based systems, including Entra ID, M365, Intune, AutoPilot, Enterprise Mobility + Security, and Defender ATP.
PowerShell scripting and automation skills.
Familiarity with ITIL-based change management, including CAB submissions, risk assessments, and rollback planning.
Experience with Freshservice for incident, change, and request management.
Customer escalation and conflict resolution skills.
Resource planning and mitigation management skills.
Excellent verbal and written communication skills.
Legally authorized to work in the United States without requiring employer sponsorship now or in the future.

Nice To Haves

Experience supporting M&A or tenant migration projects in a Microsoft 365 environment.

Responsibilities

Perform day-to-day Entra ID and M365 tenant administration, including user provisioning, shared mailboxes, dynamic distribution groups, roles, permissions, and security groups.
Collaborate with cloud application and network administrators to support efficient operation of the end-user computing environment.
Manage third-party application installation and endpoint patching.
Create technical documentation for implementations and break-fix solutions, and assist with end-user documentation and FAQs.
Monitor Microsoft applications and systems for outages, trends, and global issues.
Work with internal IT teams to develop solutions, processes, standards, and best practices.
Assist with project plans, risk assessments, contingency plans, and monitoring, configuration management, and reporting solutions.
Perform performance monitoring, server maintenance, and troubleshooting.
Stay current on trends in Microsoft applications and systems.
Own and execute enterprise endpoint patch management across Windows using Microsoft Autopatch and macOS using Intune update policies, including ring configuration, pilot testing, production rollouts, and compliance reporting.
Manage third-party application patching using Patch My PC, including publishing critical applications, enforcing automatic updates, and triaging and remediating patch failures.
Drive endpoint CVE remediation, including driver and firmware updates, and coordinate vulnerability prioritization with Cybersecurity.
Build and maintain executive-level patch compliance dashboards and reporting for leadership visibility and audit readiness.
Author and submit Freshservice change requests for endpoint configuration and patching changes, and secure CAB approval before production deployment.
Participate in the Change Advisory Board process and present risk assessments and rollback plans for infrastructure and endpoint changes.
Manage Intune device compliance policies, AutoPilot deployment profiles, and endpoint security configurations, including Defender ATP, tamper protection, and account lockout policies.
Support Microsoft 365 workstream activities for M&A integrations, including tenant migrations, user provisioning, mail routing, and Intune policy alignment for acquired entities.
Develop and maintain SOPs and runbooks for recurring processes such as Windows feature updates, patch cycles, and endpoint onboarding.