Microsoft 365 Administrator

PrePass•Phoenix, AZ

3d•Onsite

About The Position

PrePass is seeking a Microsoft 365 Administrator to manage the day-to-day administration of the PrePass Microsoft 365 tenant, including Exchange Online, Microsoft Teams, Intune-managed endpoints, SharePoint and OneDrive, and Entra ID account lifecycle. This is a hands-on operational role in a regulated environment (SOC 2 Type II and pursuing GovRAMP Moderate authorization) where access control, data protection, and documented procedures are critical. The role also involves administering the Microsoft 365 Copilot deployment, including license allocation, adoption reporting, and SharePoint permission hygiene. While architectural and governance decisions are escalated to IT leadership, this role executes established policy and identifies risks and opportunities. The administrator will act as the resolution owner for complex issues across these platforms and will be the point of contact for the support team when deeper expertise is needed. Responsibilities include building and maintaining PowerShell and Microsoft Graph scripts for automation and documentation, and partnering with the Support Center team to improve first-contact resolution rates.

Requirements

3–5 years administering Microsoft 365 in a production environment (Admin Center, Entra ID, security groups, access policies)
Hands-on Exchange Online administration — mailboxes, mail flow, message trace, distribution groups
Hands-on Microsoft Intune administration — device enrollment, compliance policies, configuration profiles, and application deployment across Windows and macOS
Microsoft Teams administration, including policy and lifecycle management
SharePoint Online and OneDrive permission administration
PowerShell scripting and Microsoft Graph for bulk administration, reporting, and auditing
Working knowledge of sensitivity labels, data loss prevention, and retention policies
Experience with role-based access control (RBAC)
Experience owning complex issue resolution in a ticket-based service management platform
Ability to document technical procedures clearly and communicate status updates effectively
Experience working with IT leadership, security and compliance teams, and business users across departments
Eligible to work in the United States

Nice To Haves

Relevant certification — MD-102 (Microsoft 365 Certified: Endpoint Administrator Associate) or MS-700 (Teams Administrator Associate)
AB-900 (Microsoft 365 Certified: Copilot and Agent Administration Fundamentals)
Microsoft 365 Copilot administration experience — Copilot Control System, Copilot Dashboard, license management
Copilot Studio agent configuration and access control verification
Intune and Configuration Manager co-management
Teams Phone and calling plan administration
Experience supporting an environment under SOC 2, GovRAMP, FedRAMP, or NIST 800-53
Microsoft Purview compliance tooling beyond core labeling and DLP
Privileged Identity Management (PIM) and Microsoft Entra ID P2 features
Basic understanding of API authentication (OAuth 2.0, REST APIs)

Responsibilities

Administer mailboxes, shared mailboxes, distribution groups, mail flow rules, and connectors in Exchange Online.
Investigate mail delivery issues using message trace and quarantine review.
Operate anti-spam and anti-phishing policy in coordination with the security team.
Manage Exchange Online Archiving and mailbox retention configuration.
Administer Teams policies, team and channel lifecycle, and guest access.
Support Teams Phone, calling plans, and audio conferencing, including number assignment, call routing, and dial-in configuration.
Resolve meeting, audio, and peripheral device issues affecting end users.
Manage Windows and macOS device enrollment, compliance policies, and configuration profiles in Microsoft Intune.
Package and deploy applications; maintain the enterprise application catalog.
Operate Windows Autopilot provisioning and support co-managed devices alongside Configuration Manager.
Manage update rings and remediate non-compliant devices.
Administer SharePoint Online site collections, permissions, sharing policies, and external sharing controls.
Identify and remediate overly permissive access and permission sprawl in SharePoint Online and OneDrive.
Support content lifecycle, storage management, and access request workflows.
Execute employee and contractor account lifecycle (provisioning, changes, deprovisioning) in coordination with HR workflows.
Manage security groups, license assignment, and role-based access.
Maintain conditional access policy and support multifactor authentication operations.
Escalate federation and SSO integration design to the identity platform owner.
Manage Copilot license allocation and revocation through security groups.
Monitor Copilot adoption and utilization; identify underutilized licenses for reallocation.
Report usage telemetry and adoption trends to IT leadership on a regular cadence.
Monitor Copilot Studio consumption against tenant capacity and flag cost anomalies.
Verify that Copilot data access aligns with SharePoint permission and sensitivity label configuration.
Support deployment of custom agents, including testing configurations and verifying access controls.
Apply and maintain sensitivity labels, data loss prevention policies, and retention policies.
Support evidence collection for SOC 2 Type II and GovRAMP audit cycles.
Maintain documented administrative procedures and change records.
Monitor acceptable use of approved AI tools and escalate data handling concerns to management.
Act as resolution owner for complex Microsoft 365 issues that require deep platform expertise.
Diagnose and resolve incidents spanning Exchange Online, Teams, SharePoint, OneDrive, and managed endpoints.
Reduce recurring issue volume by identifying root cause and building knowledge content for the support team.
Partner with the Support Center team to raise first-contact resolution rates on common requests.
Build and maintain PowerShell and Microsoft Graph scripts for bulk operations, license reporting, and permission auditing.
Document configurations, runbooks, and technical procedures to a standard others can follow.

Benefits

Medical, dental, and vision insurance that start on date of hire.
Paid Time Off, to include vacation, sick, holidays, and floating holidays.
Paid parental leave.
401(k) plan with employer match.
Company-funded “lifestyle account” upon date of hire for you to apply toward your physical and mental well-being (i.e., ski passes, retreats, gym memberships).
Tuition Reimbursement Program.
Voluntary benefits, to include, but not limited to Legal and Pet Discounts.
Employee Assistance Program (available at no cost to you).
Company-sponsored and funded “Culture Team” that focuses on the Physical, Mental, and Professional well-being of employees.
Community Give-Back initiatives.
Culture that focuses on employee development initiatives.
Company-wide bonus and commission plans.