Senior Microsoft 365 Engineer
Posted 19hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for urgent care provider WellStreet. Automating regulated platform governance with Graph, PowerShell, Intune, Entra ID, and Purview.
Responsibilities:
- Own the Microsoft 365 platform at WellStreet
- Design sensitivity label taxonomy and DLP policies across Exchange, SharePoint, and Teams
- Architect and manage Entra ID, including Conditional Access, hybrid identity, privileged access, password protection, SSPR, and access reviews
- Configure and manage Intune across Windows, macOS, iOS, and Android, including compliance and configuration profiles, security baselines, Autopilot, update rings, and app packaging
- Manage Exchange Online, Teams, and SharePoint tenant configuration, mail flow, and transport rules
- Configure Purview DLP, sensitivity labeling, retention, audit, eDiscovery, and HIPAA/HITRUST control mapping
- Implement and govern SSO and SCIM across enterprise applications
- Manage Defender endpoint detection and response, Defender for Office 365 anti-phishing and threat investigation, and unified M365 alerting
- Triage CVEs from SecOps, track remediation, and produce weekly reports
- Maintain an accurate application catalog, effective runbooks, vendor SLAs, and BAAs
- Build version-controlled, API-driven M365 management in an Azure DevOps repository using Microsoft Graph and PowerShell, with app-only authentication and Key Vault
- Use Python or declarative tooling where appropriate
- Review AI-assisted work before it affects a tenant holding PHI
Requirements:
- Five or more years in M365, identity, or security engineering
- Tenant-level depth in Entra ID and Intune
- Real Purview configuration experience, including DLP policies, labeling, retention, and eDiscovery
- Fluency with Microsoft Graph and PowerShell; automation by default and experience building against the API
- Python is a plus
- Version control experience with normal use of branches and pull requests
- Experience working against HIPAA, HITRUST, SOC 2, or PCI, with ability to explain controls
- Daily AI use and judgment about what must be reviewed before affecting a tenant holding PHI
- Terraform, Bicep, or Azure DevOps pipelines are nice to have
- Exposure to declarative M365 management, including Microsoft365DSC, a Terraform M365 provider, or Graph Tenant Configuration Management APIs is nice to have
- Healthcare IT experience is nice to have
- Experience owning a vulnerability or patch compliance program is nice to have
- FreshService or comparable ITSM experience is nice to have
- ITIL v4 is nice to have
- SC-200, SC-300, SC-400, MS-102, or MD-102 certification is nice to have
Benefits:
- Full-time remote work arrangement
- Real platform ownership with autonomy and mandate to build an engineering practice
- Opportunity to establish version control, review, and automation standards
- Opportunity to become the obvious lead as engineers are added
- Use of AI across engineering, administration, and documentation
















