Microsoft Platform Engineer (System Engineer II)

The City of Falls Church Virginia•Falls Church, VA

2d•Onsite

About The Position

The City of Falls Church is seeking an experienced, outcomes-driven Microsoft Platform Engineer to join its Information Technology team. The role designs, implements, and enhances the Microsoft 365 (M365) environment, which supports approximately 300 staff. Reporting to the Senior Systems Engineer, the engineer serves as a technical authority for M365 workloads and the Entra/Azure ecosystem in a Government Community Cloud (GCC) tenant, helping shape platform direction, evaluate emerging capabilities such as Microsoft Copilot, and ensure security, compliance, and operational standards are met. The position combines platform ownership and architecture with hands-on engineering and support. It leads M365 architecture and governance; manages tenant operations, migrations, integrations, and complex escalations; supports end users; implements security, compliance, identity, and eDiscovery capabilities; and advances Power Platform, automation, and Copilot adoption. The engineer also provides technical guidance, training, and enablement to support adoption of platform capabilities. This is a full-time, 40-hour-per-week onsite position with limited telework and an on-call rotation. Core business hours are 8 AM to 5 PM. The annual salary range is $100,000–$134,900, depending on qualifications. The position closes November 19, 2026.

Requirements

Bachelor’s degree in Information Systems, Computer Science, or a closely related field; equivalent professional experience and certifications are considered.
At least 7 years of hands-on experience administering a Microsoft 365 Government Community Cloud tenant.
Deep expertise in Exchange Online, SharePoint Online, Microsoft Teams, OneDrive, and Power Platform.
Strong working knowledge of Microsoft 365 security, compliance, and governance features, including Microsoft Purview.
Demonstrated experience implementing and supporting Information Protection, Data Loss Prevention, Data Lifecycle Management, Insider Risk Management, and Microsoft Defender.
Proficiency in Microsoft Copilot administration, including agent management, Copilot Credits, and Pay-as-you-Go licensing models.
Hands-on experience with eDiscovery, including conducting searches and producing data exports for legal and investigative purposes.
Knowledge of Power Automate, Power Apps, and Microsoft Intune.
Excellent analytical and troubleshooting skills, including diagnosing complex, multi-layered issues and implementing effective solutions.
Strong written and verbal communication skills, including the ability to explain technical concepts to technical and non-technical audiences at all organizational levels.
Ability to manage competing priorities, meet deadlines, and maintain composure in a fast-paced, globally distributed environment.

Nice To Haves

Microsoft 365 Endpoint Administrator Associate Certification.
Microsoft 365 Mobility and Security Certification.
Microsoft 365 Identity and Services Certification.

Responsibilities

Lead the overall M365 platform architecture and establish and evolve its operational governance model to support scalability, reliability, and organizational objectives.
Define and enforce standards and best practices for Exchange Online, SharePoint Online, Microsoft Teams, and Power Platform.
Develop and maintain standards, process documentation, and control frameworks for audit, compliance, and operational continuity.
Monitor Microsoft roadmap updates, evaluate new features, make adoption recommendations, and establish governance policies for newly released capabilities.
Manage and optimize the enterprise M365 tenant supporting over 300 staff.
Lead M365 tenant migration and integration projects, including preparing test plans, implementation plans, and project timelines.
Provide expert-level escalation support for complex M365 issues and coordinate with Microsoft and third-party vendors to resolve them.
Monitor system performance, service health, and user-impacting incidents, and communicate status and remediation plans to stakeholders.
Support end users of Microsoft 365 applications and services, including Exchange Online, Teams, SharePoint, OneDrive, and Intune.
Troubleshoot client-side Microsoft 365 issues, handle escalations, and resolve tickets efficiently.
Implement and manage M365 security and compliance capabilities, including Conditional Access Policies, Privileged Identity Management, Information Protection, Data Loss Prevention, Data Lifecycle Management, Insider Risk Management, and Microsoft Defender.
Support access management and Identity Governance through single sign-on and Conditional Access, and assist with Privileged Access Management initiatives.
Help develop the security posture, enforce best practices, and translate compliance requirements into platform controls.
Administer eDiscovery searches and data exports for legal proceedings and internal investigations.
Assess the Power Platform environment, identify gaps, recommend improvements, drive adoption, and lead implementation of enhancements.
Develop and maintain automation frameworks and scripts to streamline M365 management, reduce operational overhead, and improve consistency.
Evaluate and support Microsoft Copilot capabilities, including management of agent usage and tenant licensing.
Provide technical guidance, training, and enablement to support end-user adoption of new platform capabilities.