Microsoft 365 Engineer

Description

Alvarez & Marsal (A&M) is aglobalconsultingfirm with entrepreneurial, action and results-oriented professionals. Wetake a hands-on approach to solving our clients' problems andassistingthem in reaching their potential. Our culture celebrates independent thinkers and doers who positivelyimpactour clients and shape our industry. The collaborative environment and engaging work—guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are why our people love working at A&M.

You’ll be part of a collaborative and technically focused environment, working closely with colleagues across Security, Compliance, Infrastructure, Service Desk, and the wider business. The role has broad visibility across the organization and provides the opportunity to influence how Microsoft 365, identity, collaboration, and SaaS services are delivered and supported.

• Administer Exchange Online: mail flow, transport rules, connectors, mailboxes and archives, shared mailboxes and delegation, and hybrid coexistence where it remains.
• Administer SharePoint Online and One Drive: site provisioning and lifecycle, sharing configuration, permission remediation, storage and quota management, and restore requests.
• Administer Microsoft Teams: messaging and meeting policies, external access and federation, guest and shared channel settings, and app permissions. Support adjacent collaboration workloads as they are adopted, including Planner, Loop, Forms, Bookings, and Viva.
• Administer Entra  and group lifecycle, group-based licensing, Conditional Access changes, authentication method and MFA troubleshooting, and access reviews.
• Configure and maintain SSO and provisioning for SaaS applications (SAML, OIDC, SCIM), and review enterprise applications, OAuth consent grants, and API permissions, remediating anything over-scoped, unused, or without a clear owner.
• Resolve Tier 3 escalations for Microsoft 365 and identity issues, establish root cause, close each case with a permanent fix or documented workaround, and manage open cases with Microsoft support and third-party providers.
• Automate administrative and lifecycle tasks using Power Shell and Microsoft Graph (SDK or REST). Administer the Power Platform, including environment management, connector DLP policies, and oversight of user-built apps and flows.
• Support administration of Copilot and other AI tooling, covering licensing, access scoping, connector configuration, and the SharePoint permission remediation required beforehand.
• Coordinate with the security and compliance teams where Purview and Defender for Office 365 intersect with tenant configuration. Those teams set policy; this role implements the tenant-side changes and advises on impact.
• Monitor the Message Center and Microsoft 365 roadmap, test upcoming changes, communicate user impact ahead of release, and keep runbooks, knowledge base articles, and configuration documentation current.

• 5+ years in IT, with at least 3 of that focused on Microsoft 365 administration.
• Solid hands-on experience across Exchange Online, SharePoint Online, One Drive, and Teams.
• Working knowledge of Entra  and groups, Conditional Access, authentication methods, and app registrations.
• Experience configuring SSO and SCIM provisioning for third-party applications.
• Demonstrable Power Shell scripting ability, with examples you can walk through. Graph experience is a strong plus.
• Able to troubleshoot across workloads and establish root cause, not just restore service.
• Working understanding of Microsoft 365 licensing and the capabilities each SKU includes.
• Familiar with change management and ticketing, Service Now or similar.
• Clear communicator who can explain a technical problem to a non-technical audience, and flag when a request will create one.
• Organized, detail-oriented, and able to manage your own workload with limited oversight.

• Copilot or other AI assistant administration experience
• AvePoint experience across backup, migration, or governance tooling
• Exchange hybrid or on-premises experience
• Tenant-to-tenant migration work
• MS-102, SC-300,…