Microsoft 365 Engineer

About TRS

Since 1917, the Teachers’ Retirement System of the City of New York (TRS) has helped secure the retirement futures of New York City educators. TRS administers the Qualified Pension Plan (QPP), a defined benefit plan, and the Tax-Deferred Annuity (TDA) Program, and provides retirement, disability, and death benefit services to members.

TRS is committed to a member-centered culture, grounded in operational excellence, service quality, accountability, and continuous improvement.

Position Overview

The Microsoft 365 Engineer is responsible for the administration, optimization, and strategic management of the organization's Microsoft 365 environment. This role will serve as the primary owner of the Microsoft 365 platform, including Exchange Online, SharePoint Online, One Drive, Microsoft Teams, and Entra .

The engineer will lead Microsoft 365 modernization initiatives, including migrating user and departmental data to One Drive and SharePoint Online, implementing Microsoft 365 Copilot, and ensuring a secure, compliant, and highly available collaboration platform. The ideal candidate combines strong technical expertise with hands‑on migration experience and the ability to drive adoption of Microsoft 365 services across the organization.

Microsoft 365 Platform Administration:

• Own and manage the organization's Microsoft 365 tenant.
• Administer Exchange Online, SharePoint Online, One Drive for Business, Microsoft Teams, and Entra .
• Maintain tenant health, licensing, governance, and service configurations.
• Monitor Microsoft 365 service health and proactively resolve issues.

Exchange Online Administration:

• Manage mail flow, connectors, transport rules, spam and phishing protection.
• Administer mailboxes, shared mailboxes, distribution lists, archive policies, and permissions.
• Troubleshoot mail delivery, routing, authentication, and mailbox access issues.
• Perform Exchange Online administration using both the Microsoft 365 Admin Center and Power Shell.
• Configure and maintain SPF, DKIM, and DMARC.

SharePoint Online & One Drive:

• Design and administer SharePoint Online sites, permissions, governance, and document libraries.
• Manage One Drive for Business configuration, storage policies, sharing settings, and lifecycle management.
• Lead migration of user home drives, file shares, and departmental data to One Drive and SharePoint Online.
• Optimize collaboration and document management using Microsoft 365 best practices.

Microsoft 365 Copilot Implementation:

• Lead the planning, deployment, and administration of Microsoft 365 Copilot.
• Assess organizational readiness for Copilot adoption.
• Configure security, permissions, and data governance required for Copilot.
• Collaborate with business stakeholders to identify use cases and improve user productivity.
• Provide user guidance and support for Copilot adoption.

Identity & Security:

• Administer Microsoft Entra , including user and group management.
• Configure Conditional Access, Multi‑Factor Authentication (MFA), and role‑based access control (RBAC).
• Support hybrid identity with Active Directory and Entra Connect.
• Configure Microsoft Defender for Office 365 security policies.
• Implement and maintain Microsoft Purview features including Data Loss Prevention (DLP), retention policies, sensitivity labels, and eDiscovery.
• Ensure Microsoft 365 security and compliance align with organizational standards and industry best practices.

Automation & Administration

• Develop and maintain Power Shell scripts to automate Microsoft 365 administration, reporting, and operational tasks.
• Develop automation and integrations using Microsoft Graph Power Shell and Microsoft Graph API.
• Create reports and administrative workflows for Microsoft 365 services using Microsoft Graph.
• Create and maintain…