M365 Platform Engineer

M365 Platform Engineer

Location:

Omaha, NE, US

Position Overview:

We are seeking a Microsoft 365 Platform Engineer to operate, automate, secure, and modernize Kiewit's enterprise Microsoft 365 environment. This hands-on role supports endpoint management, identity, collaboration, security, administration, and cloud-connected services. This position delivers roadmap priorities, resolves complex issues, improves platform reliability, and helps move legacy processes toward scalable, cloud-first operations.

District Overview:
Kiewit Technology Group builds solutions to enable and support our company's expansive operations. Our mission is to deliver project schedule and cost certainty by employing technology designed by and for the construction industry. Our team utilizes systems and tools that manage every part of Kiewit's business and the project lifecycle to improve planning and day-to-day execution in the field. We give our people real-time data to make faster, smarter decisions.

Location:

This is a full time in office role located on our LaVista, NE campus.

• Platform Administration & Engineering
• Provide Tier 2 and Tier 3 support for complex incidents, requests, access issues, policy problems, and service configuration concerns.
• Monitor service health, security signals, audit data, platform changes, and configuration drift; maintain support documentation and procedures.
• Deliver Microsoft 365 roadmap and backlog priorities, including well-defined platform enhancements and small-to-medium initiatives.
• Build and maintain automation using Power Shell, Microsoft Graph, Power Platform, Python, REST APIs, or similar tools.
• Create repeatable configuration patterns, workflows, templates, standards, reports, dashboards, and alerts.
• Collaborate with cloud engineering and application teams on secure integrations and Microsoft 365-connected services.
• Modernization, Governance, & Security
• Support modernization of endpoint and identity operations, including Autopilot, Entra-managed devices, Intune, Windows servicing, co-management, and reduced reliance on traditional domain-join models.
• Evaluate, pilot, test, document, and operationalize new Microsoft 365 capabilities.
• Implement governance and security controls such as Conditional Access, least privilege, privileged access, compliance, endpoint security, information protection, audit, and reporting.
• Plan production changes with appropriate testing, risk assessment, communication, rollback, compliance review, and remediation support.
• Collaboration, Adoption, & Continuous Improvement
• Partner with Security, Identity, Infrastructure, Service Desk, Enterprise Architecture, Procurement, Compliance, application teams, and business stakeholders.
• Communicate platform changes, governance requirements, user impacts, and support expectations to technical and non-technical audiences.
• Support adoption through release communications, knowledge transfer, training materials, service desk enablement, and post-launch support.

Bachelor's degree in a related field, or equivalent education and experience. Four or more years of IT support, systems administration, endpoint management, identity, cloud administration, platform engineering, or related technical experience, including hands-on Microsoft 365 experience. Working knowledge of Microsoft 365 services such as Intune, Entra , Conditional Access, Teams, SharePoint, One Drive, Defender, Purview, governance, and reporting. Experience administering identity, access, endpoint, policy, application, or collaboration services in an enterprise environment.

Experience using Power Shell to troubleshoot, administer, report on, or automate enterprise technology services. Understanding of modern endpoint, identity, security, least privilege, change control, auditability, reliability, and data protection practices. Strong troubleshooting, ownership, prioritization, follow-through, communication, and cross-team collaboration skills.

Relevant Microsoft certifications in Microsoft 365, endpoint management, identity, security, automation, or Azure. Experience with Microsoft Graph, Power Platform, Python, REST APIs, reporting, analytics, Git, Git Hub Actions, Azure Dev Ops, or configuration-as-code practices. Experience with Autopilot, SCCM/MECM, co-management, Group Policy modernization, domain-join reduction, Entra-managed devices, Defender, Purview, Windows 365, Copilot, Teams, SharePoint, or One Drive. Experience with Service Now or enterprise service management practices.

Familiarity with adjacent platforms such as Active Directory, Saviynt, Citrix, VMware vSphere, or Rubrik.

Other Requirements:
Regular, reliable attendance Work productively and meet deadlines timely Communicate and interact effectively and professionally with supervisors, employees, and others individually or in a team environment. Perform work safely and effectively. Understand and follow oral and written instructions, including warning signs, equipment use,…