Senior Microsoft 365 Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Microsoft 365 Engineer owning identity, endpoint, and compliance for WellStreet Urgent Care. Automating HIPAA-governed Microsoft 365 operations through Graph, PowerShell, and version control.
Responsibilities:
- Own the Microsoft 365 platform at WellStreet
- Design sensitivity label taxonomies and DLP policies across Exchange, SharePoint, and Teams
- Set up SSO and SCIM for clinical vendors and identify deprovisioning issues
- Close quarterly access reviews on privileged groups using Microsoft Graph automation
- Triage critical CVEs from SecOps, own remediation timing, and track remediation
- Move Intune configuration from admin centers into a version-controlled repository
- Architect and manage Entra ID tenant configuration, Conditional Access, hybrid identity, privileged access, password protection, SSPR, and access reviews
- Manage Intune across Windows, macOS, iOS, and Android, including compliance and configuration profiles, security baselines, Autopilot, update rings, and app packaging
- Configure Exchange Online, Teams, and SharePoint, including mail flow and transport rules
- Configure Purview DLP, sensitivity labeling, retention, audit, eDiscovery, and HIPAA/HITRUST control mapping
- Manage enterprise application SSO and SCIM and ensure applications handling PHI do not use standalone credentials
- Manage Defender endpoint detection and response, Defender for Office 365 anti-phishing and threat investigation, and unified M365 alerting
- Maintain an accurate application portfolio catalog and effective runbooks
- Hold vendors accountable to SLAs and BAAs
- Build toward version-controlled, API-driven M365 management using Azure DevOps, Microsoft Graph, PowerShell, app-only authentication, and Key Vault
- Use AI across engineering, administration, and documentation while applying appropriate PHI review controls
- Collaborate with infrastructure on shared Entra ID responsibilities and Defender workload-security boundaries
Requirements:
- Five or more years in M365, identity, or security engineering
- Tenant-level depth in Entra ID and Intune
- Real Purview configuration experience, including DLP policies, labeling, retention, and eDiscovery
- Fluency with Microsoft Graph and PowerShell; automation by default and experience building against the API
- Python is a plus
- Version control experience; branches and pull requests are normal practice
- Experience working against a regulated framework such as HIPAA, HITRUST, SOC 2, or PCI
- Ability to explain controls rather than merely name them
- Daily AI use and judgment about what requires review before touching a tenant holding PHI
- Nice to have: Terraform, Bicep, or Azure DevOps pipelines
- Nice to have: declarative M365 management exposure, including Microsoft365DSC, a Terraform M365 provider, or Graph Tenant Configuration Management APIs
- Nice to have: healthcare IT experience
- Nice to have: vulnerability or patch compliance program ownership
- Nice to have: FreshService or comparable ITSM
- Nice to have: ITIL v4
- Nice to have: SC-200, SC-300, SC-400, MS-102, or MD-102
- Positive attitude toward patients, families, and coworkers
- Willingness to create outstanding customer experiences and train and lead center teams
- Desire to work collaboratively in an upbeat and supportive atmosphere
- Desire to serve others and improve community health
Benefits:
- Real platform ownership with mandate and backing to build an engineering practice
- Version control, review, and automation replacing tribal knowledge and portal-based administration
- Opportunity to set standards as the first dedicated hire for the function
- Potential to become the obvious lead as engineers are added
Similar Jobs
Forward Deployed Engineer
Forward Deployed Engineer building applied AI, LLM systems, and ML infrastructure. Partner-facing delivery from discovery through deployment and reliability for enterprise and research teams.
Intern Projectleider – Technical Engineer, Industrie
Intern Projectleider / Technical Engineer voor industriële koel- en klimaatprojecten bij Carrier Refrigeration Benelux. Technische engineering, leverancierscoördinatie en projectdocumentatie.
Core Engineer
Core Engineer operating Webbing’s global MVNO mobile core across roaming, 5G-SA, and live production networks. Troubleshooting incidents and leading network integrations end to end.
Civil/Structural Forensic Engineer
Licensed civil/structural forensic engineer investigating construction defects, disasters, and property damage. Preparing defensible findings for insurance claims and litigation matters.
Engineer IV
Engineer IV leading PLC, HMI, and automation projects for Xylem's industrial water-treatment systems. Commissioning and optimizing controls for refineries, power plants, chemical facilities, and major customers.
L1 Service Desk Engineer
L1 Service Desk Engineer resolving client incidents and requests across Windows, Microsoft 365, networking, and Active Directory. Supporting Satellite Office’s offshore teams serving global brands.
Senior Microsoft 365 Engineer
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for WellStreet Urgent Care. Automating regulated healthcare governance with Graph, PowerShell, Intune, and Purview.
Senior Microsoft 365 Engineer
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for urgent care provider WellStreet. Automating regulated platform governance with Graph, PowerShell, Intune, Entra ID, and Purview.
Relay Settings Engineer
Relay Settings Engineer developing protective relay settings and power-system studies. Supporting renewable energy and utility projects for RRC, a U.S. multidisciplinary engineering firm.
Senior Project Engineer
Senior Project Engineer overseeing electrical engineering, procurement, construction, and commissioning for e-STORAGE utility-scale battery projects. Supporting North American renewable energy infrastructure delivery.
Project Engineer
Project Engineer coordinating electrical engineering, procurement, construction, and commissioning for e-STORAGE utility-scale battery storage projects. Supporting renewable energy deployment across Canada and the United States.
Engineer III – Flexibles
Engineer III serving as TOPPAN Packaging Americas’ technical customer contact. Developing, commercializing, and improving flexible packaging structures for food, healthcare, and consumer products.
Senior Project Engineer
Senior Project Engineer overseeing electrical engineering and commissioning for Canadian Solar’s utility-scale battery storage projects. Supporting procurement, construction, and technical coordination across North America.
Project Engineer
Project Engineer coordinating engineering, procurement, construction, and commissioning for Canadian Solar’s utility-scale battery storage projects across North America.
Senior Forward Deployed Engineer, Gemini Enterprise Platform
Senior Forward Deployed Engineer building production AI agents, data pipelines, and context graphs for Google's Gemini Enterprise Platform. Embedding with clients to deploy, govern, and transfer maintainable solutions.
Agent Engineer
Agent Engineer building production-ready AI agents, automations, and integrations for Worldwide Events Group’s global MICE and luxury travel events. Developing reusable workflows across business systems.
Agent Engineer
Agent Engineer building production-ready AI agents, automations and integrations for Worldwide Events Group’s global MICE and luxury travel events. Six-month FTC reporting to the Head of AI Implementation.
Martech Engineer
Engenheiro Martech implementando rastreamento e mensuração digital para websites, apps e plataformas de marketing da SoftDesign. Desenvolvendo Data Layers, integrações de APIs e SDKs mobile.
Senior Process Control Engineer – Fiberline
Senior Process Control Engineer improving DCS control systems and fiberline performance for Georgia-Pacific’s U.S. paper mills. Troubleshooting operations, optimizing assets, and supporting capital projects.
Migration Engineer
Migration Engineer onboarding NIPRNet applications to Okta and SailPoint. Supporting DoD ICAM integration, identity federation, UAT, and Zero Trust compliance.