Microsoft 365 Azure Engineer
About The Position
We are seeking a highly skilled Senior Microsoft 365 / Entra Engineer to lead identity engineering, Microsoft 365 migration initiatives, and platform automation across a mature enterprise Microsoft ecosystem. This role is heavily focused on Entra ID architecture, Microsoft Graph API integrations, advanced PowerShell automation, and acquisition-driven Microsoft 365 migrations. The ideal candidate has extensive experience migrating organizations into Microsoft 365 environments, automating identity processes, administering SharePoint Online, and supporting cloud collaboration platforms. This is a hands-on engineering role responsible for building scalable processes, documenting systems, and ensuring operational excellence across the Microsoft 365 platform. This is a hands-on engineering role with direct impact. You will take ownership of a mature, well-governed tenant, and your first mandate is to independently validate and document how it works, then keep it that way. Every system you build or change gets documented, every process gets a runbook, and knowledge stays with the team, not with one person.
Requirements
- 5+ years of hands-on Microsoft 365 and Azure/Entra engineering experience in a multi-site or enterprise environment
- Microsoft Graph API proficiency: proven experience building and maintaining Graph API integrations for identity, provisioning, and automation. This is a hard requirement, not a nice-to-have.
- PowerShell automation: advanced scripting for M365, Entra ID, Exchange Online, and Intune administration. This is a hard requirement, not a nice-to-have.
- Demonstrated experience with tenant-to-tenant, Google Workspace, and IMAP or legacy email platform migrations to M365
- Deep working knowledge of Entra ID, conditional access, Intune, Exchange Online, and SharePoint Online administration
- Proven ability to walk into an unfamiliar tenant and reverse-engineer it: auditing existing configurations, mapping dependencies, and producing documentation where none exists. Candidates should expect to demonstrate this skill in the interview process.
- Strong documentation discipline with work samples or examples available on request
- Microsoft Entra ID (Azure Active Directory)
- Conditional Access
- Multi-Factor Authentication (MFA)
- Identity Governance
- Access Reviews
- User Lifecycle Management
- Entra Connect / Azure AD Connect
- Single Sign-On (SSO)
- Security and Authentication C
Nice To Haves
- Healthcare or regulated-industry experience, with working knowledge of HIPAA technical safeguards and the governance expectations that come with PHI-adjacent systems
- Experience supporting M&A or acquisition integration at volume
- Microsoft certifications: SC-300, MS-102, AZ-104, or equivalent
- Power BI administration experience (dashboard development is a plus but is not the core of this role)
- Experience in environments with formal change management and audit-driven governance
Responsibilities
- Onboard newly acquired practices
- Execute mailbox, OneDrive, and file migrations, including tenant-to-tenant, Google Workspace, and legacy or non-standard email platforms (IMAP/POP hosts, registrar-hosted email, and other one-off systems common in practice acquisitions)
- Plan and coordinate domain transitions, DNS cutovers, and post-cutover support
- Build repeatable, documented migration processes that scale with acquisition volume
- Design and maintain identity architecture, including Active Directory to Entra ID synchronization
- Administer conditional access, MFA strategy, and authentication modernization
- Run Entra governance activities: access reviews, tenant permission reviews, provisioning workflows
- Build and maintain Microsoft Graph API integrations for identity and lifecycle automation
- Design and maintain device onboarding, enrollment, and lifecycle processes
- Lead Azure AD Join migration planning and execution
- Support BitLocker management and endpoint remediation
- Train internal IT staff on device onboarding procedures
- Lead file share to SharePoint migrations
- Design and enforce SharePoint permission models, security hardening, and access governance
- Support platform integrations with related SaaS tools across the portfolio
- Build and support Power Automate workflows and process automation
- Develop and troubleshoot API integrations (Microsoft Graph, monday.com, and other SaaS platforms)
- Support SSO implementation and troubleshooting across the SaaS portfolio
- Execute tenant hardening, security architecture reviews, and Microsoft Defender recommendations
- Support account compromise investigations and email security response
- Operate within client IT governance framework; architecture and governance decisions are set by IT leadership and executed by this role
- Produce and maintain technical documentation, migration runbooks, and operational handoff materials for every system and process you own
- Deliver knowledge transfer to internal IT staff as a standing expectation, not an afterthought
- Success in this role means no single person, including you, is ever the only one who knows how the tenant works
Benefits
- AM has benefits guide for request
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
