Staff M365 Engineer

Penn Mutual•Philadelphia, PA

8d•$145,000 - $165,000

About The Position

At Penn Mutual, we're seeking a Staff M365 Engineer who is passionate about shaping and supporting the modern workplace experience. In this role, you'll serve as a senior technical leader responsible for the architecture, engineering, security, and reliability of our Microsoft 365 ecosystem across the enterprise. As the technical authority for M365 platforms including Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, and Copilot, you'll help ensure our environment remains secure, scalable, resilient, and aligned with business productivity goals. This position combines deep hands-on expertise, architectural leadership, and cross-functional collaboration to drive innovation and enablement across the organization, while maintaining strong governance, security, and compliance standards.

Requirements

10+ years of experience in enterprise collaboration or workplace engineering
5+ years of deep, hands-on Microsoft 365 experience
Expert-level knowledge of Exchange Online, SharePoint Online/OneDrive, and Microsoft Teams (including Teams Phone/voice; Direct Routing preferred)
Strong expertise in Microsoft Entra ID (Azure AD), Identity and access management, PowerShell automation, and Microsoft Graph API and automation tooling
Proven experience supporting large, regulated enterprise environments
Core Workloads: Exchange Online, Teams (including Teams Phone), SharePoint Online/OneDrive
Power Platform: Power Automate/Power Apps, DLP, environment governance
Copilot: Microsoft 365 Copilot readiness, governance, adoption, extensibility
Migrations: Tenant-to-tenant consolidation (identity, mail, Teams, SharePoint/OneDrive)
Security & Compliance: Purview (labels/retention/eDiscovery), Defender for Office 365
Identity: Entra ID/Azure AD (Conditional Access, MFA, PIM, RBAC)
Automation & Operations: PowerShell, Microsoft Graph, monitoring/incident/change management
Endpoint: Intune/MDM/MAM concepts and device compliance
Customer Service: Exceptional attitude and passion for providing outstanding service to internal customers
Attention to Detail: Thoroughness in accomplishing tasks; monitors and checks work; plans and organizes time and resources efficiently
Analytical Skills: Collects and researches data; designs workflows and procedures; identifies data relationships and dependencies
Communication: Strong listening and comprehension; expresses ideas clearly in verbal and written form; keeps others adequately informed
Problem Solving: Solves issues efficiently and quickly; evaluates options and escalates appropriately
Relationship Management: Manages interactions to service and support the organization; establishes credibility with all interactions
Teamwork: Contributes to positive team spirit; exhibits objectivity and openness to others' views

Nice To Haves

Experience enabling and governing M365 Copilot and Power Platform at scale
Familiarity with Microsoft Intune/Endpoint management and device compliance concepts
Background in financial services, insurance, healthcare, or similarly regulated industries
Familiarity with Zero Trust and modern workplace security patterns
Microsoft Certifications (not required): MS-102, SC-300, or equivalent
Experience with tenant-to-tenant consolidation, or large-scale migrations (email, Teams, SharePoint/OneDrive)

Responsibilities

Serve as enterprise architect and escalation point for Microsoft 365 services.
Design, implement, and evolve M365 architecture including Exchange Online, Microsoft Teams (voice, meetings, collaboration), SharePoint Online & OneDrive, Power Platform (Power Automate, Power Apps), and M365 Copilot.
Define platform patterns, standards, and configurations for performance, security, and scalability.
Collaborate with Security and Compliance teams to ensure Microsoft 365 aligns with identity and conditional access policies, Data Loss Prevention (DLP), Information Protection, retention, eDiscovery, Microsoft Purview (sensitivity labels, retention policies), and Microsoft Defender for Office 365.
Implement and maintain governance for external sharing and guest access, and privileged access (PIM/RBAC).
Support audits and regulatory requirements.
Plan, implement and support the migration from Zoom to Teams.
Design secure integrations between M365 and Entra ID/Azure AD, IAM solutions (SSO, MFA, Conditional Access), and third-party SaaS and enterprise systems.
Define identity and access models for users, service accounts, and automation.
Deliver seamless and secure user experiences across devices and locations.
Drive platform reliability and operational excellence through monitoring, logging, alerting, incident response, and root cause analysis.
Automate provisioning, configuration, and lifecycle management using PowerShell, Power Platform, and Infrastructure-as-Code patterns.
Advance SRE and ITSM practices.
Manage Microsoft 365 service health, own change and release practices, and maintain platform documentation and runbooks.
Lead secure enablement of M365 Copilot and collaboration and productivity experiences.
Coordinate with Product, L&D, and business teams to deliver adoption strategies and guardrails.
Define extensibility patterns for Copilot plugins, integrations, and prompts.
Act as technical mentor to engineers and administrators.
Provide architectural guidance in design reviews and change approvals.
Influence roadmap decisions with vendors and internal stakeholders.
Translate technical decisions into clear business outcomes.