Office 365 Infrastructure & Security Management Lead

KLA•Milpitas, CA

9d•$111,100 - $188,900•Onsite

About The Position

The position of Microsoft 365 Infrastructure & Security Management is responsible for the strategic direction, operational excellence, security posture, and lifecycle management of the organization's Microsoft 365 ecosystem. This role leads the administration, engineering, governance, security, and continuous improvement of Microsoft 365 services with deep skills in Exchange Online. The individual will be accountable for ensuring a secure, highly available, scalable, and compliant Microsoft 365 environment while driving enterprise email security initiatives through Proofpoint, Microsoft Defender, anti-phishing programs, threat prevention, and tenant governance. This role works closely with Cybersecurity, Infrastructure Operations, Enterprise Architecture, Compliance, Risk Management, and business stakeholders to deliver secure modern workplace services for a global enterprise.

Requirements

Doctorate (Academic) Degree and related work experience of 3 years
Master's Level Degree and related work experience of 6 years
Bachelor's Level Degree and related work experience of 8 years

Responsibilities

Own the strategy, roadmap, architecture, and operations of the Microsoft 365 platform.
Lead Microsoft 365 tenant administration and governance.
Ensure platform availability, performance, scalability, and reliability.
Define operational standards, policies, and best practices for Microsoft 365 services.
Manage service lifecycle planning, upgrades, feature adoption, and platform optimization.
Develop and maintain M365 governance and operating models.
Lead global administration of Microsoft Exchange Online.
Manage email routing, mail flow, connectors, transport rules, and SMTP infrastructure.
Oversee mailbox provisioning, migrations, retention, archiving, and lifecycle management.
Manage hybrid Exchange environments when applicable.
Ensure email platform health, performance, uptime, and service availability.
Troubleshoot complex messaging issues and coordinate escalations with Microsoft support.
Establish standards for email security, compliance, and operational governance.
Own enterprise email security strategy and operations.
Lead phishing prevention, business email compromise (BEC) protection, and email threat management initiatives.
Drive troubleshooting, implementation and optimization of: Proofpoint Email Security, Microsoft Defender for Office 365, Advanced Threat Protection (ATP), Anti-phishing policies, Safe Links, Safe Attachments, Impersonation protection.
Monitor and respond to email-based threats.
Partner with Cybersecurity teams to investigate phishing incidents and threat campaigns.
Serve as technical owner for the email security platform.
Manage: Secure Email Gateway (SEG), TAP (Targeted Attack Protection), Email DLP, Threat Intelligence, Phishing Protection, URL Defense, Email Encryption.
Optimize email filtering to reduce false positives and false negatives.
Implement email authentication standards including: SPF, DKIM, DMARC, Domain Protection.
Create executive reporting on email threat trends and security metrics.
Partner with Cybersecurity teams to strengthen M365 security posture.
Manage Microsoft security controls including: Microsoft Defender for Office 365, Microsoft Defender XDR, Microsoft Purview, Conditional Access, Data Loss Prevention (DLP), Information Protection, Insider Risk Management.
Lead security assessments and remediation efforts.
Ensure compliance with regulatory and corporate security requirements.
Implement Zero Trust security principles across Microsoft 365 services.
Administer Microsoft 365 tenant services and configurations.
Partner with Identity teams supporting: Microsoft Entra ID, Single Sign-On (SSO), Federation Services, Multifactor Authentication (MFA), Conditional Access, Identity Governance.
Manage tenant security baselines and configuration standards.
Maintain tenant health, security reviews, and governance processes.
Oversee integration between Microsoft 365 and enterprise infrastructure services.
Support: Microsoft Intune, Endpoint Management, Device Compliance, Azure Services, Enterprise Authentication Platforms.
Collaborate with Infrastructure Operations to ensure service resiliency and business continuity.
Lead day-to-day service operations for the Microsoft 365 environment.
Establish KPIs, SLAs, operational dashboards, and service reporting.
Drive incident, problem, change, and capacity management processes.
Manage vendor relationships including Microsoft and Proofpoint.
Develop automation strategies for platform administration and support activities.
Ensure alignment with ITIL and ServiceNow processes.
Develop governance controls for Microsoft 365 services.
Conduct platform risk assessments and remediation planning.
Support security audits, compliance reviews, and regulatory requirements.
Maintain disaster recovery and business continuity plans.
Drive continuous service improvement initiatives.