Senior Microsoft 365 Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for WellStreet Urgent Care. Automating regulated healthcare governance with Graph, PowerShell, Intune, and Purview.
Responsibilities:
- Own the Microsoft 365 platform at WellStreet, with identity and data governance aligned to HIPAA obligations
- Design sensitivity label taxonomies and DLP policies across Exchange, SharePoint, and Teams
- Implement SSO and SCIM for clinical vendors and monitor deprovisioning
- Close quarterly access reviews on privileged groups using Microsoft Graph automation
- Triage critical CVEs from SecOps, manage remediation tracking, and produce weekly reports
- Move Intune configuration from admin centers into a version-controlled repository
- Manage Entra ID tenant architecture, Conditional Access, hybrid identity, privileged access, password protection, SSPR, and access reviews
- Manage Intune across Windows, macOS, iOS, and Android, including compliance and configuration profiles, security baselines, Autopilot, update rings, and app packaging
- Administer Exchange Online, Teams, and SharePoint tenant configuration, mail flow, and transport rules
- Configure Purview DLP, sensitivity labeling, retention, audit, eDiscovery, and HIPAA/HITRUST control mapping
- Manage enterprise application SSO and SCIM and enforce standards for applications handling PHI
- Manage Defender endpoint detection and response, Defender for Office 365 anti-phishing, threat investigation, and unified alerts
- Maintain an accurate application catalog, effective runbooks, vendor SLAs, and BAAs
- Build toward version-controlled, API-driven M365 management in Azure DevOps using Microsoft Graph, PowerShell, app-only authentication, and Key Vault
- Use Python or declarative tooling where appropriate
- Establish engineering standards and practices as the first dedicated hire for this function
Requirements:
- Five or more years in M365, identity or security engineering
- Tenant-level depth in Entra ID and Intune
- Real Purview configuration experience, including writing DLP policies, labeling, retention, and eDiscovery
- Fluency in Microsoft Graph and PowerShell; this is the hard technical gate
- Experience automating against the Microsoft Graph API
- Version control experience; branches and pull requests are normal practice
- Experience working against a regulated framework such as HIPAA, HITRUST, SOC 2, or PCI
- Ability to explain a control rather than just name it
- Daily AI use and judgment about what must be reviewed before touching a tenant holding PHI
- Python is a plus
- Nice to have: Terraform, Bicep, Azure DevOps pipelines, declarative M365 management, healthcare IT, vulnerability or patch compliance program ownership, FreshService or comparable ITSM, ITIL v4, SC-200, SC-300, SC-400, MS-102, or MD-102
- Positive attitude toward patients, families, and coworkers
- Willingness to go the extra mile to create an outstanding customer experience and train and lead the center team
- Desire to work collaboratively in an upbeat and supportive atmosphere
- Desire to serve others and improve community health
Benefits:
- Real platform ownership with the mandate and backing to build an engineering practice
- Version control, review, and automation in place of tribal knowledge and portal archaeology
- Opportunity to set standards as the first dedicated hire for this function
- Potential to become the obvious lead as engineers are added
Similar Jobs
Forward Deployed Engineer
Forward Deployed Engineer building applied AI, LLM systems, and ML infrastructure. Partner-facing delivery from discovery through deployment and reliability for enterprise and research teams.
Intern Projectleider – Technical Engineer, Industrie
Intern Projectleider / Technical Engineer voor industriële koel- en klimaatprojecten bij Carrier Refrigeration Benelux. Technische engineering, leverancierscoördinatie en projectdocumentatie.
Core Engineer
Core Engineer operating Webbing’s global MVNO mobile core across roaming, 5G-SA, and live production networks. Troubleshooting incidents and leading network integrations end to end.
Civil/Structural Forensic Engineer
Licensed civil/structural forensic engineer investigating construction defects, disasters, and property damage. Preparing defensible findings for insurance claims and litigation matters.
Engineer IV
Engineer IV leading PLC, HMI, and automation projects for Xylem's industrial water-treatment systems. Commissioning and optimizing controls for refineries, power plants, chemical facilities, and major customers.
L1 Service Desk Engineer
L1 Service Desk Engineer resolving client incidents and requests across Windows, Microsoft 365, networking, and Active Directory. Supporting Satellite Office’s offshore teams serving global brands.
Senior Microsoft 365 Engineer
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for urgent care provider WellStreet. Automating regulated platform governance with Graph, PowerShell, Intune, Entra ID, and Purview.
Senior Microsoft 365 Engineer
Senior Microsoft 365 Engineer owning identity, endpoint, and compliance for WellStreet Urgent Care. Automating HIPAA-governed Microsoft 365 operations through Graph, PowerShell, and version control.
Relay Settings Engineer
Relay Settings Engineer developing protective relay settings and power-system studies. Supporting renewable energy and utility projects for RRC, a U.S. multidisciplinary engineering firm.
Senior Project Engineer
Senior Project Engineer overseeing electrical engineering, procurement, construction, and commissioning for e-STORAGE utility-scale battery projects. Supporting North American renewable energy infrastructure delivery.
Project Engineer
Project Engineer coordinating electrical engineering, procurement, construction, and commissioning for e-STORAGE utility-scale battery storage projects. Supporting renewable energy deployment across Canada and the United States.
Engineer III – Flexibles
Engineer III serving as TOPPAN Packaging Americas’ technical customer contact. Developing, commercializing, and improving flexible packaging structures for food, healthcare, and consumer products.
Senior Project Engineer
Senior Project Engineer overseeing electrical engineering and commissioning for Canadian Solar’s utility-scale battery storage projects. Supporting procurement, construction, and technical coordination across North America.
Project Engineer
Project Engineer coordinating engineering, procurement, construction, and commissioning for Canadian Solar’s utility-scale battery storage projects across North America.
Senior Forward Deployed Engineer, Gemini Enterprise Platform
Senior Forward Deployed Engineer building production AI agents, data pipelines, and context graphs for Google's Gemini Enterprise Platform. Embedding with clients to deploy, govern, and transfer maintainable solutions.
Agent Engineer
Agent Engineer building production-ready AI agents, automations, and integrations for Worldwide Events Group’s global MICE and luxury travel events. Developing reusable workflows across business systems.
Agent Engineer
Agent Engineer building production-ready AI agents, automations and integrations for Worldwide Events Group’s global MICE and luxury travel events. Six-month FTC reporting to the Head of AI Implementation.
Martech Engineer
Engenheiro Martech implementando rastreamento e mensuração digital para websites, apps e plataformas de marketing da SoftDesign. Desenvolvendo Data Layers, integrações de APIs e SDKs mobile.
Senior Process Control Engineer – Fiberline
Senior Process Control Engineer improving DCS control systems and fiberline performance for Georgia-Pacific’s U.S. paper mills. Troubleshooting operations, optimizing assets, and supporting capital projects.
Migration Engineer
Migration Engineer onboarding NIPRNet applications to Okta and SailPoint. Supporting DoD ICAM integration, identity federation, UAT, and Zero Trust compliance.