Microsoft 365 Engineer

Invesco Ltd. • Louisville, KY

1d • Hybrid

About The Position

Invesco is seeking a Microsoft 365 Engineer to administer, support, and improve Enterprise Workplace and Collaboration solutions across Microsoft 365. This role focuses on Microsoft 365 administration with a specialization in Microsoft Purview and Microsoft Data Loss Prevention (DLP), including information protection, sensitivity labeling, compliance policy configuration, data governance, monitoring, and incident response across various Microsoft 365 services. The role also involves Entra ID connectivity, service migration to M365, and MDM/MAM. The engineer will contribute to the M365 service strategy, ensure platform capabilities align with business needs, and support business resilience and data protection obligations.

Requirements

• 2–4 years in a Microsoft 365 engineering or administration role, including hands-on experience supporting Microsoft 365 security, compliance, and/or collaboration services.
• Working technical knowledge of Microsoft 365 architecture and administration, with exposure to Microsoft Purview, Data Loss Prevention, information protection, and compliance disciplines.
• Experience diagnosing and resolving policy, configuration, and service issues while maintaining professionalism and clear stakeholder communication.
• Interpersonal skills necessary to communicate effectively at varying technical levels.
• Demonstrated commitment to quality client service.
• Strong communication skills with the ability to understand and converse in English, verbally and in writing.
• Ability to adhere to Invesco technical and operational procedures and policies.
• Ability to interact and communicate throughout the IT organization with individuals of varying technical abilities.
• Self-motivated, enthusiastic, approachable, and people-oriented.
• Microsoft Purview Data Loss Prevention (DLP), including policy creation, tuning, testing, reporting, and incident management.
• Microsoft Purview Information Protection, including sensitivity labels, label publishing, and data classification.
• Microsoft 365 DLP coverage across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios.
• Exchange Online administration, mail flow awareness, and integration of compliance and protection controls.
• Microsoft Entra ID / Azure AD, including identity, access, and conditional access fundamentals.
• Compliance operations including audit, retention, role-based access control, and reporting within Microsoft Purview.
• MDM/MAM and endpoint management exposure, including Microsoft Intune and support for endpoint data protection controls.
• Awareness of Microsoft Copilot Studio and the broader Power Platform ecosystem (Power Apps, Power Automate, Dataverse) and governance considerations for low-code and agent-based solutions.

Nice To Haves

• Previous experience in Financial Services or another regulated environment is preferred.
• Hands-on experience creating, tuning, testing, or supporting DLP policies using sensitive information types, policy tips, alerts, incident management, and reporting is desirable.
• Familiarity with Microsoft Purview features such as sensitivity labels, retention, audit, compliance reporting, and role-based administration is a plus.
• Bachelor's degree preferred - in MIS, CIS, Computer Science, or related field.
• Relevant Microsoft certifications (e.g., MS-500, SC-400, MS-102) preferred or in progress.

Responsibilities

• Contribute to the execution of the Microsoft 365 service strategy, helping ensure platform capabilities, security controls, and compliance requirements align with business needs and enterprise technology design principles.
• Administer and support core Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, and related collaboration and productivity capabilities.
• Configure, implement, and maintain Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios to help reduce the risk of sensitive data exposure.
• Build and maintain working knowledge of Microsoft Purview capabilities including DLP, sensitivity labels, data classification, retention, audit, compliance reporting, and related information protection controls.
• Collaborate with peers on the engineering team to share knowledge on Microsoft 365 administration, operational support, troubleshooting, and data protection practices.
• Work with security, legal, risk, records management, and business stakeholders to help translate regulatory and policy requirements into Microsoft Purview and Microsoft 365 controls.
• Monitor policy matches, alerts, incidents, dashboards, and reporting within Microsoft Purview and related Microsoft 365 admin tools; investigate trends, help reduce false positives, and suggest improvements.
• Follow and help maintain operational procedures, service health checks, start-of-day checks, recovery processes, and control routines to keep Microsoft 365 and Purview services resilient and supportable.
• Support the delivery of business resilience, data protection, and governance obligations for assigned Microsoft 365 and compliance services.
• Assist with troubleshooting and resolution of Microsoft 365, Purview, and DLP issues, including policy behavior, classification outcomes, mail flow impacts, sharing restrictions, and endpoint enforcement scenarios; escalate complex issues as appropriate.
• Maintain documentation, standards, and user guidance for Microsoft 365 and Purview capabilities, and deliver quality service to business partners through clear communication and support.

Benefits

• Flexible paid time off
• Hybrid work schedule
• 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution
• Health & wellbeing benefits
• Parental Leave benefits
• Employee stock purchase plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree