M365 Engineer

The Company

STACK INFRASTRUCTURE (STACK) provides digital infrastructure to scale the world’s most innovative companies. We are an award‑winning industry leader in building, owning, and operating highly efficient, cost‑effective wholesale, colocation, and cloud data centers. Each of our national facilities meets or exceeds the highest industry standards in all operational categories of availability, security, connectivity, and physical resilience. STACK offers the scale and geographic reach that rapidly growing hyperscale and enterprise companies need.

The world runs on data. Data runs on STACK.

We are seeking a highly skilled and experienced Microsoft 365 Engineer/Administrator to own and operate our enterprise M365 platform across a global, multi‑region environment. This role is responsible for the full lifecycle management of Exchange Online, Microsoft Teams, SharePoint Online, Azure Active Directory (Entra ), Microsoft Intune, and related cloud services.

• Serve as the primary administrator for the Microsoft 365 tenant, managing Exchange Online, SharePoint Online, Microsoft Teams, One Drive for Business, and the broader M365 suite across global operations.
• Configure, maintain, and optimize Azure Active Directory (Entra ), including user lifecycle management, conditional access policies, authentication methods, and role‑based access controls.
• Design and implement M365 governance frameworks encompassing sensitivity labels, DLP policies, retention policies, and Microsoft Purview compliance controls.
• Manage Microsoft Teams administration, including policies, voice/telephony configurations, guest access, and Teams app governance.
• Administer SharePoint Online site collections, hub sites, permissions architecture, and storage management; diagnose and remediate unique permissions threshold issues.
• Manage email security stack including EOP, Microsoft Defender for Office 365, anti‑phishing/anti‑spam policies, DKIM, DMARC, and SPF configurations.
• Administer and enforce DLP, information barriers, eDiscovery, and audit logging in alignment with regulatory and corporate compliance requirements.
• Support IT SOX compliance controls, COBIT 2019, and NIST SP 800‑53 frameworks as they relate to M365 platform security and data protection.
• Monitor, investigate, and respond to security incidents and alerts within the M365 Defender portal and Azure Security Center.
• Implement and manage Conditional Access policies and Zero Trust security principles across the M365 ecosystem.
• Administer Microsoft Intune for MAM and MDM across Windows, macOS, iOS, and Android platforms.
• Design, deploy, and maintain Windows Autopilot and Kandji enrollment profiles, compliance policies, and configuration profiles for global end‑user device fleets.
• Manage Patch My PC integration with Intune for automated third‑party application patching across Windows endpoints.
• Support end‑to‑end EUC lifecycle, including device provisioning, image management, application packaging, and hardware refresh planning for Mac and Windows environments.
• Implement temporary local admin elevation solutions integrated with Entra  ITSM workflows.
• Design and manage SSO integrations with SaaS and on‑premises applications via Entra  Applications and SAML/OIDC protocols.
• Implement SCIM provisioning for automated user lifecycle management across connected applications.
• Administer on‑premises Active Directory, Azure AD Connect / Cloud Sync, and hybrid identity configurations.
• Manage DNS, domain registration, and domain administration across corporate domains tied to the M365 tenant.
• Maintain Entra  features including access reviews, PIM, and entitlement management.
• Support Azure cloud infrastructure components that underpin or integrate with the M365 platform, including Azure Virtual Networks, App Services, and Storage.
• Collaborate with architecture teams on Azure‑based solutions such as AI Search, Azure AI Foundry, Cosmos DB, and Databricks integrations.
• Manage Azure subscriptions, resource groups, cost management, and tagging strategies relevant to M365‑adjacent workloads.
• Implement and maintain Azure Monitor, Log Analytics, and alerting for M365 and Azure…