Systems Engineer - M365

The Systems Engineer I – M365 is a mid-level position within EdFed Credit Union’s IT Infrastructure Team, with a primary specialty in Microsoft 365, Azure cloud services, identity management, and endpoint administration. This role is responsible for administering the M365 tenant, Entra , Intune, and the Microsoft security and compliance stack while contributing equally to shared team responsibilities spanning servers, networking, unified communications, and security operations.

The position is structured as a 50/50 split between M365/cloud specialty duties and shared IT Infrastructure Team responsibilities, ensuring cross‑functional coverage and operational resilience across all infrastructure domains.

• Administer Microsoft 365 (Exchange, SharePoint, Teams, One Drive) including user lifecycle, licensing, permissions, mail flow, and governance.
• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.
• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.
• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.
• Administer Microsoft Entra  conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).
• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.
• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.
• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.
• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).
• Collaborate with IT Security on Sentinel alerting, automation, and tuning.
• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.
• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.
• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.
• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.
• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.
• Administer Ring Central UCaaS including provisioning, call routing, IVR, and device support.
• Troubleshoot voice quality and connectivity issues across sites.
• Assist with basic network troubleshooting and hybrid connectivity components.
• Develop automation using Power Shell, Graph API/SDK, and Power Automate; maintain scripts in version control.
• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.
• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.
• Monitor systems and networks to proactively address alerts and performance issues.
• Use AI powered tools to enhance productivity and operational efficiency.
• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.
• Maintain runbooks, configuration guides, and knowledge base documentation.
• Complete or participate in additional duties or projects as assigned by management.

• Associate's degree or equivalent combination
• 5-7 years of experience in systems engineering, M365 administration, cloud operations, or a related IT role

• Strong hands‑on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, One Drive).
• Working knowledge of Microsoft Entra  (Azure AD), conditional access, hybrid identity (Azure AD Connect), and SSO protocols (SAML, OAuth/OIDC).
• Experience configuring and managing Microsoft Intune for device enrollment, compliance, application deployment, and Autopilot.
• Experience with email security administration including DMARC, DKIM, SPF, and secure mail…