Microsoft 365 / Azure Engineer

BGBC, a Springline company•,

1d•$120,000 - $165,000•Remote

About The Position

This role is a foundational member of Springline’s Technology, Innovation & Engineering shared-services operating model. The position will help establish the internal cloud, identity, collaboration, and endpoint-management capabilities needed to support reliable daily operations, repeatable firm integrations, secure platform governance. The Microsoft 365 / Azure Engineer will lead the design, configuration, and on-going management of our enterprise M365 tenant inclusive of Identity, Collaboration, System Management, Mobility Management, and Data Governance and Protection functionality. This role blends architectural platform strategy with hands-on operational activities. This senior role will contribute to the organization’s technology roadmap and guide effective enterprise adoption of the M365 platform, including integration with other cloud technologies. This role will be a key participant, along with our managed service partners, in supporting effective M&A activity. You will partner closely with IT leadership, business stakeholders, information security, and our managed service provider(s). This position is remote with occasional travel to our offices to support business initiatives, projects, and other team initiatives.

Requirements

Bachelor’s degree in Computer Science, information systems, or equivalent professional experience.
10+ years of information technology experience with 5+ years administering and supporting M365 and/or Azure, including at least one year of lead/architect responsibilities.
Strong working knowledge of M365 security and data governance functionality, including the use of Conditional Access, Purview data governance, and data access control.
Experience with DevOps orchestrated system management tools for rapid deployment, optimization, and reliable operation.
Familiarity with regulatory compliance frameworks as applicable to driving secure and auditable operation and access.
Experience with Cloud native Identity and migrations from on-prem Active Directory to Entra ID.

Responsibilities

Own the architecture, configuration standards, and operational maturity of the Microsoft M365 platform, including Exchange, Entra, OneDrive, SharePoint, Intune, and Purview.
Lead the technical implementation and guide the organizational adoption of new and/or changed capabilities.
Own platform hardening activities in coordination with our Information Security team.
Design and operate identity management activities, including permissions management, single sign on integrations, permission access reviews, and conditional access policies.
Improve and maintain data protection and compliance controls within M365, including Purview Data Loss Prevention (DLP), use of sensitivity labels, and the implementation of data retention policies.
Improve and maintain documented change management processes, leveraging automation to orchestrate changes, and adopt telemetry-informed continuous improvement.
Build and maintain production-grade automation using industry-standard tooling, including AI-assisted development where it accelerates delivery without reducing ownership.
Work with our managed service providers to maintain operational health of the platform.
Contribute to the architecture and operation of Microsoft Azure, including virtual desktops, virtual servers, containers, and Azure Functions.
Improve use of system management features (Intune and Autopilot) to drive consistent management and control of our end user devices.
Define and own mobile access architecture for iOS and Android.
Participate with integrating email/M365 tenants of acquired firms, including guiding data migrations.
Own enterprise messaging architecture, global mail flow, and configuration of email security features.
Define and manage platform permissions management to control access rights.
Configuration and management of OneDrive and SharePoint to streamline usability for end users and managing access to data.