Engineer, Microsoft 365

KeHE Distributors, LLC•Naperville, IL

13h

About The Position

At KeHE, we’re obsessed with creating solutions, unboxing potential, and serving others – and it all starts with you. As an employee-owned distributor of natural and organic, specialty, and fresh products, we’re committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you’ll be embarking on a career that’s moving forward. When you join KeHE, you’re becoming part of a team that is a force for good.

Requirements

Deep knowledge of Microsoft 365 tenant management, governance, security, licensing, and compliance in complex or hybrid enterprise environments.
Proficiency with PowerShell scripting and automation.
Strong knowledge of Zero Trust architecture and Microsoft security best practices.
Strong project management and organizational skills; able to manage timelines, resources, risk, and stakeholder communication on assigned projects.
Excellent communication skills with the ability to translate technical concepts into business-friendly language.
Strong analytical thinking and problem-solving with a proactive, continuous improvement mindset.
Collaborative and customer-focused mindset with the ability to influence and inspire peers.
Bachelor’s degree in Computer Science, Information Technology, or equivalent experience
5+ years of hands-on Microsoft 365 administration experience in an enterprise environment.

Nice To Haves

Hands-on experience implementing and managing emerging technologies, including Copilot and its agents, is strongly preferred.
Microsoft certifications preferred: MS-102 (M365 Administrator Expert), MS-721 (Collaboration Communications), or SC-400 (Information Protection).

Responsibilities

Administer the Microsoft 365 tenant including configuration, licensing, subscriptions, service health, and RBAC.
Automate tenant operations using PowerShell, Microsoft Graph, and administrative APIs.
Enforce tenant-wide policies for security, compliance, governance, external sharing, and lifecycle management.
Evaluate and validate roadmap and preview features before production rollout; conduct tenant health assessments and drive continuous improvements to performance, security, and adoption.
Administer Microsoft Entra ID including Conditional Access, MFA, passwordless authentication, SSO, PIM, B2B/B2C Integrations and identity governance.
Manage hybrid identity with Active Directory and Entra Connect.
Implement and support Zero Trust controls across Microsoft 365.
Monitor identity security posture, remediate risks using Microsoft Defender for Identity, and support identity, access, and governance compliance initiatives.
Configure and maintain sensitivity labels, retention policies, and information protection policies in Microsoft Purview.
Design, deploy, and maintain SharePoint Online architecture and governance standards.
Configure and manage SharePoint Online, OneDrive, and Teams integrations to support intranet, document management, and collaboration solutions.
Execute and support content migrations and information architecture improvements.
Implement site lifecycle management, provisioning standards, external sharing controls, and governance policies.
Deploy and configure Microsoft Copilot for Microsoft 365 including readiness assessments, phased rollout, and adoption programs.
Implement and support Copilot Studio agent lifecycle from proof-of-concept through production, enforcing least-privilege access and change management procedures.
Assist in developing governance standards and data classification requirements for Copilot and its agents in partnership with Security and the AI committee.
Partner with business stakeholders to identify AI-driven productivity opportunities and translate them into governed solutions.
Monitor Copilot adoption, effectiveness, and security impacts; report outcomes to IT leadership.
Maintain secure configurations across all M365 platforms aligned with NIST and CIS frameworks; drive Secure Score improvements, Compliance Manager remediations, and tenant hardening initiatives.
Support security audits, regulatory requirements, and policy compliance across the M365 environment.
Provide Level 2/3 support, troubleshooting, and root cause analysis for Microsoft 365 services.
Create and update documentation, architecture diagrams, FAQs, and knowledge base articles.
Support auditing, reporting, and operational monitoring across Microsoft 365; participate in after-hours or on-call support as needed.
Evaluate emerging Microsoft 365 capabilities, conduct proof-of-concepts, and track the Microsoft 365 roadmap; communicate the impact of upcoming changes and provide recommendations to IT leadership.
Serve as a subject matter expert for M365 platforms, promoting best practices and contributing to architectural discussions.