Systems Admin - Microsoft 365

ASM Research • Oak Ridge, TN

2d

About The Position

The Microsoft 365 / Exchange Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, focusing on Microsoft 365 account management, Exchange Online, and identity services. The role is responsible for operating and maintaining Exchange Online, Azure Active Directory, and related M365 workloads to ensure secure, reliable, and compliant messaging and collaboration services in alignment with DOE directives and federal IT standards. Administer Azure Active Directory (Azure AD), including user lifecycle management, group policies, conditional access, MFA, and role-based access control.  Manage M365 accounts and licensing, ensuring proper provisioning, de-provisioning, and compliance with organizational policies. Implement and enforce identity protection and security policies across M365 tenants, adhering to federal cybersecurity standards. Provide Tier III support for Windows, macOS, and mobile endpoints integrated with M365 services. Administer Exchange Online mail flow, including transport rules, connectors, mailbox policies, and hybrid configurations. Manage mailbox provisioning, permissions, and retention policies. Support public folders, shared mailboxes, and distribution groups. Monitor and troubleshoot mail delivery, synchronization, and performance issues.  Implement and maintain security and compliance features such as DLP, eDiscovery, audit logging, and retention, in alignment with federal guidelines. Support Microsoft Teams policies, messaging, and voice integration. Administer SharePoint Online and OneDrive for Business, including permissions, governance, and data protection. Ensure integration and interoperability across Exchange, Teams, SharePoint, and OneDrive. Continuously monitor Exchange Online and M365 services for availability, health, and performance. Detect and resolve service bottlenecks, outages, and synchronization issues in line with SLAs. Track and report on license utilization, resource consumption, and Azure/M365 cost usage. Maintain operational records such as maintenance logs, backup validation history, and tenant inventories. Maintain and update the Configuration Management Database (CMDB) with M365 and Exchange configuration items. Submit all changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process. Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines. Document and maintain tenant policies, SOPs, and configuration records, reviewed quarterly or after major changes.

Requirements

• Bachelor's Degree in Information Technology, Computer Science or a related field or equivalent relevant experience; Master's Degree preferred.
• 7-10 years of experience in information technology, systems administration or other IT related field.
• Proficiency in PowerShell scripting, Azure CLI, and automation tools for M365 and Exchange administration.
• Strong knowledge of Exchange Online, Azure AD, Teams, SharePoint Online, and OneDrive.
• Ability to support Windows, macOS, and mobile endpoints integrated with M365 services.

Nice To Haves

• Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: Microsoft 365 Certified: Messaging Administrator Associate, Microsoft 365 Certified: Enterprise Administrator Expert, Microsoft Certified: Azure Administrator Associate, CompTIA Security+ or Network+.
• Experience with hybrid Exchange environments (on-premises + cloud).
• Familiarity with M365 compliance frameworks (DLP, retention, eDiscovery, audit).
• Strong troubleshooting skills for mail flow, account provisioning, and identity synchronization issues.
• Strong skills in incident detection, response, and recovery, following federal guidelines and protocols.
• Experience in ensuring compliance with federal regulations and conducting audits to verify compliance.
• Strong written and verbal communication skills to interact effectively with stakeholders at all levels, including non-technical personnel and senior government officials.
• Skills in managing IT projects, including planning, execution, monitoring, and closing, using methodologies like PMP (Project Management Professional) or Agile frameworks.
• Familiarity with federal IT compliance standards (e.g., FISMA, NIST SP 800-53).
• Knowledge of federal government IT best practices and standards.
• Experience with continuous monitoring and incident response in a federal environment.
• Ability to work under federal IT security protocols and procedures.

Responsibilities

• Administer Azure Active Directory (Azure AD), including user lifecycle management, group policies, conditional access, MFA, and role-based access control.
• Manage M365 accounts and licensing, ensuring proper provisioning, de-provisioning, and compliance with organizational policies.
• Implement and enforce identity protection and security policies across M365 tenants, adhering to federal cybersecurity standards.
• Provide Tier III support for Windows, macOS, and mobile endpoints integrated with M365 services.
• Administer Exchange Online mail flow, including transport rules, connectors, mailbox policies, and hybrid configurations.
• Manage mailbox provisioning, permissions, and retention policies.
• Support public folders, shared mailboxes, and distribution groups.
• Monitor and troubleshoot mail delivery, synchronization, and performance issues.
• Implement and maintain security and compliance features such as DLP, eDiscovery, audit logging, and retention, in alignment with federal guidelines.
• Support Microsoft Teams policies, messaging, and voice integration.
• Administer SharePoint Online and OneDrive for Business, including permissions, governance, and data protection.
• Ensure integration and interoperability across Exchange, Teams, SharePoint, and OneDrive.
• Continuously monitor Exchange Online and M365 services for availability, health, and performance.
• Detect and resolve service bottlenecks, outages, and synchronization issues in line with SLAs.
• Track and report on license utilization, resource consumption, and Azure/M365 cost usage.
• Maintain operational records such as maintenance logs, backup validation history, and tenant inventories.
• Maintain and update the Configuration Management Database (CMDB) with M365 and Exchange configuration items.
• Submit all changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.
• Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines.
• Document and maintain tenant policies, SOPs, and configuration records, reviewed quarterly or after major changes.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level