Workplace Engineer (P4) - Microsoft 365 and… at American… · Location…

Workplace Engineer (P4) - Microsoft 365 and Entra Platform

Job Accountabilities

• Microsoft 365 Platform Administration and Support: Administer, support, and govern Microsoft 365 services including SharePoint Online, Microsoft Teams, OneDrive for Business, and related collaboration capabilities. Maintain secure and supportable configurations that enable business productivity while aligning to enterprise standards, service ownership expectations, and operational support needs.
• Microsoft Entra Identity and Access Management: Design, administer, govern, and secure Microsoft Entra ID services, including Conditional Access, Privileged Identity Management, role assignments, groups, authentication methods, enterprise applications, device identity, and identity lifecycle processes. Evaluate access requirements and implement controls that support least privilege, secure administration, and reliable user access.
• Enterprise Security and Governance: Partner with security, infrastructure, support, and business stakeholders to implement governance and security controls for Microsoft 365 and Entra services. Support privileged access governance, service hardening, access reviews, compliance alignment, exception evaluation, and risk-based decision making for identity, collaboration, and administrative capabilities.
• Decision-Making Authority: Exercise independent judgment and decision-making authority in evaluating access, risk, and governance actions within established policy and control boundaries. Decisions and recommendations influence operational standards and practices beyond the individual’s own assignments; escalate only true exceptions outside defined authority.
• Technical Leadership and Mentoring: Provide technical guidance and mentoring to other engineers and administrators on Microsoft 365 and Entra practices. Contribute to team standards, operational procedures, and continuous improvement efforts that strengthen control consistency and service reliability across the platform.
• Service Configuration and Operational Support: Serve as the recognized subject matter expert for complex Microsoft 365 and Entra service issues, configuration questions, and escalations. Analyze service behavior, access conditions, role requirements, policy impacts, and user or administrator experience to recommend practical resolutions.
• Documentation and Knowledge Management: Create and maintain clear technical documentation, standard operating procedures, service ownership records, support runbooks, knowledge articles, configuration references, and governance documentation. Ensure documentation is accurate, accessible, version-aware, and usable by engineering, support, security, and management audiences.
• Governed Change and Risk Communication: Assess proposed Microsoft 365 and Entra changes for customer impact, security implications, operational readiness, and supportability. Communicate risks, dependencies, options, and recommendations in a clear and structured manner appropriate for both technical and non-technical stakeholders.
• Operational Standards and Audit Readiness: Maintain administration and governance practices that support repeatable operations, reviewability, and audit readiness. Document decision rationale, control ownership, access requirements, exception handling, and operational standards so services can be reviewed, supported, and improved over time.

Required

• Bachelor’s degree in Information Technology, Computer Science, Business, or a related field, or equivalent combination of education, certifications, and professional experience.
• Typically 8+ years of related experience in Microsoft 365 administration, identity and access management, enterprise technology operations, information security support, infrastructure support, or a closely related area.
• Hands-on experience administering and supporting Microsoft 365 services such as SharePoint Online, Microsoft Teams, OneDrive for Business, and related collaboration capabilities in an enterprise environment.
• Hands-on experience administering Microsoft Entra ID, including Conditional Access, PIM, role-based access, enterprise applications, authentication methods, groups, and identity governance concepts.
• Working knowledge of enterprise security and governance practices, including least privilege, privileged access management, service hardening, audit readiness, access reviews, and configuration control, with the ability to partner with security, compliance, infrastructure, support, and business stakeholders on governance or access-related initiatives.
• Demonstrated ability to create clear technical, operational, and governance documentation, such as SOPs, knowledge articles, runbooks, configuration references, service ownership records, RACI-style documentation, access models, support workflows, and operational control documentation.
• Ability to analyze complex service, access, and governance issues, evaluate alternatives, exercise independent judgment, communicate risk and tradeoffs, and make sound recommendations and decisions within established policy, with limited supervision.
• Demonstrated experience providing technical guidance or mentoring to other engineers or administrators, and contributing to team standards or operational procedures.
• Strong written and verbal communication skills, with the ability to communicate technical concepts, governance requirements, and service impacts to technical teams, support teams, management, and business stakeholders.

Preferred

• Experience supporting Microsoft 365 or Entra ID in a regulated, audit-sensitive, or security-conscious enterprise environment.
• Familiarity with Microsoft Purview, Microsoft Defender, endpoint compliance signals, or related Microsoft security and compliance capabilities as they intersect with Microsoft 365 and Entra administration.
• Relevant Microsoft certifications in Microsoft 365 administration, identity and access management, security administration, or related Microsoft cloud technologies.
• Experience with modern endpoint management or device engineering practices, including Microsoft Intune, endpoint compliance, device lifecycle management, operating system deployment, configuration profiles, or related desktop engineering capabilities.
• Ability to develop or maintain scripts, queries, or automation to support repeatable administration, reporting, troubleshooting, configuration validation, or operational tasks.
• Demonstrated cross-functional coordination and practical continuous improvement efforts that reduce support friction, strengthen control consistency, improve documentation quality, or increase service reliability.