Microsoft 365 Azure Engineer

Description

Client is hiring a Senior Microsoft 365 / Azure Engineer to own the engineering, migration, and platform architecture work across our Microsoft 365 and Azure/Entra environment. This role is the technical backbone of our acquisition integration pipeline, migrating newly partnered practices into the tenant, and serves as the Senior escalation point for identity, endpoint, collaboration, and automation platforms.

This is a hands‑on engineering role with direct impact. You will take ownership of a mature, well‑governed tenant, and your first mandate is to independently validate and document how it works, then keep it that way. Every system you build or change gets documented, every process gets a runbook, and knowledge stays with the team, not with one person.

• Onboard newly acquired practices into the MB2 Dental Microsoft 365 tenant
• Execute mailbox, One Drive, and file migrations, including tenant-to-tenant, Google Workspace, and legacy or non-standard email platforms (IMAP/POP hosts, registrar-hosted email, and other one‑off systems common in practice acquisitions)
• Plan and coordinate domain transitions, DNS cutovers, and post‑cutover support
• Build repeatable, documented migration processes that scale with acquisition volume

• Design and maintain identity architecture, including Active Directory to Entra
• Administer conditional access, MFA strategy, and authentication modernization
• Run Entra governance activities: access reviews, tenant permission reviews, provisioning workflows
• Build and maintain Microsoft Graph API integrations for identity and lifecycle automation

• Design and maintain device onboarding, enrollment, and lifecycle processes
• Lead Azure AD Join migration planning and execution
• Support Bit Locker management and endpoint remediation
• Train internal IT staff on device onboarding procedures

• Lead file share to SharePoint migrations
• Design and enforce SharePoint permission models, security hardening, and access governance
• Support platform integrations with related SaaS tools across the portfolio

• Build and support Power Automate workflows and process automation
• Develop and troubleshoot API integrations (Microsoft Graph, , and other SaaS platforms)
• Support SSO implementation and troubleshooting across the SaaS portfolio

• Execute tenant hardening, security architecture reviews, and Microsoft Defender recommendations
• Support account compromise investigations and email security response
• Operate within established IT governance framework; architecture and governance decisions are set by IT leadership and executed by this role

• Produce and maintain technical documentation, migration runbooks, and operational handoff materials for every system and process you own
• Deliver knowledge transfer to internal IT staff as a standing expectation, not an afterthought
• Success in this role means no single person, including you, is ever the only one who knows how the tenant works

• 5+ years of hands‑on Microsoft 365 and Azure/Entra engineering experience in a multi‑site or enterprise environment
• Microsoft Graph API proficiency: proven experience building and maintaining Graph API integrations for identity, provisioning, and automation. This is a hard requirement, not a nice‑to‑have.
• Power Shell automation: advanced scripting for M365, Entra , Exchange Online, and Intune administration. This is a hard requirement, not a nice‑to‑have.
• Demonstrated experience with tenant‑to‑tenant, Google Workspace, and IMAP or legacy email platform…