M365 Engineer

About the company

Tootsie Roll Industries, Inc. is America's favorite candy company, manufacturing and selling some of the world's most popular confectionary brands. Beginning in a modest New York candy store with Tootsie Roll's introduction in 1896, the Chicago-based company has grown to become one of the country's largest candy companies, with operations throughout North America and with distribution channels in more than 75 countries.

The Tootsie brands resonate strongly among every age group, culture, and demographic; for every occasion and event; and during every economic climate, qualifying them as truly enduring, iconic American confections.

Tootsie Roll Industries is seeking an experienced Microsoft 365 Engineer to serve as the primary administrator and owner of our Microsoft 365 platform. This individual will be responsible for day-to-day operations, end-user support, service enhancements, and feature rollouts across a suite of M365 services used throughout the company. This includes but is not limited to:
Exchange Online, Outlook, SharePoint, One Drive, Teams, Purview, and Intune.

This role is critical to enabling productivity, ensuring data security and compliance, and supporting our continued growth through effective platform management. The Microsoft 365 Engineer operates in a team environment and will provide input on the feasibility of design solutions through the application of advanced skills obtained through several years of experience solving complex issues. They will recommend improvements and new solutions.

• Provision, configure, and manage user identities, groups, and licenses in Entra  (Azure AD). Routinely audit the organization's user and application identities using Entra  adhering to Identity and Access Management best practices.
• Manage and maintain the Microsoft 365 tenant, including user accounts, licenses, and security settings. This includes the proper backup of the M365 content including email and files.
• Administer Exchange Online mailboxes, mail flow rules, hybrid connectivity, and retention policies.
• Oversee Outlook on the web/mobile configuration, mailbox policies, and troubleshoot client connectivity.
• Configure, secure, and maintain Microsoft Teams and meeting policies.
• Manage SharePoint Online sites, site collections, permissions, hub sites, and policies for external sharing.
• Implement and maintain data governance and compliance controls with Microsoft Purview (e.g., DLP, Information Protection, Insider Risk Management).
• Develop best practices, governance frameworks, and lifecycle management plans for collaboration services.

• Enforce conditional access, multifactor authentication, and identity protection policies in Entra .
• Ensure proper integration between on-premises Active Directory and Azure Active Directory for seamless user authentication and access management.
• Configure retention labels, sensitivity labels, and compliance policies across Exchange, Teams, and SharePoint via Purview.
• Conduct periodic audits, reviews of access, and remediation of security vulnerabilities.
• Implement and enforce cloud security protocols to prevent unauthorized access and cyber threats.

• Utilize Microsoft 365 admin center, Defender portal, and Power Shell to monitor service health, usage, and security alerts.
• Investigate and resolve complex issues related to mail routing, client connectivity, Teams meetings, and SharePoint access.
• Develop and maintain operational runbooks, automation scripts (Power Shell, Graph API), and dashboards.
• Respond to security alerts to eradicate threats within the environment.

• Work with service desk and application teams to integrate third-party tools and enforce change management.
• Provide end-user training, documentation, and proactive communications on feature updates and best practices.
• Participate in on-call rotation and perform off-hours support and maintenance as required.

• Manage Windows Server environments to ensure optimal performance, security, and reliability.
• Install, configure, and maintain server…