M365 Platform Engineer

Position Overview

We are seeking a Microsoft 365 Platform Engineer to operate, automate, secure, and modernize Kiewit's enterprise Microsoft 365 environment. This hands‑on role supports endpoint management, identity, collaboration, security, administration, and cloud-connected services.

This position delivers roadmap priorities, resolves complex issues, improves platform reliability, and helps move legacy processes toward scalable, cloud‑first operations.

Kiewit Technology Group builds solutions to enable and support our company's expansive operations. Our mission is to deliver project schedule and cost certainty by employing technology designed by and for the construction industry. Our team utilizes systems and tools that manage every part of Kiewit's business and the project lifecycle to improve planning and day‑to‑day execution in the field. We give our people real‑time data to make faster, smarter decisions.

This is a full time in office role located on our LaVista, NE campus.

• Administer and support Microsoft 365 services, including Intune, Entra , Conditional Access, Teams, SharePoint, One Drive, Defender, Purview, Windows 365, and related admin centers.
• Provide Tier 2 and Tier 3 support for complex incidents, requests, access issues, policy problems, and service configuration concerns.
• Monitor service health, security signals, audit data, platform changes, and configuration drift; maintain support documentation and procedures.
• Deliver Microsoft 365 roadmap and backlog priorities, including well‑defined platform enhancements and small‑to‑medium initiatives.
• Build and maintain automation using Power Shell, Microsoft Graph, Power Platform, Python, REST APIs, or similar tools.
• Create repeatable configuration patterns, workflows, templates, standards, reports, dashboards, and alerts.
• Collaborate with cloud engineering and application teams on secure integrations and Microsoft 365‑connected services.

• Support modernization of endpoint and identity operations, including Autopilot, Entra‑managed devices, Intune, Windows servicing, co‑management, and reduced reliance on traditional domain‑join models.
• Evaluate, pilot, test, document, and operationalize new Microsoft 365 capabilities.
• Implement governance and security controls such as Conditional Access, least privilege, privileged access, compliance, endpoint security, information protection, audit, and reporting.
• Plan production changes with appropriate testing, risk assessment, communication, rollback, compliance review, and remediation support.

• Partner with Security, Identity, Infrastructure, Service Desk, Enterprise Architecture, Procurement, Compliance, application teams, and business stakeholders.
• Communicate platform changes, governance requirements, user impacts, and support expectations to technical and non‑technical audiences.
• Support adoption through release communications, knowledge transfer, training materials, service desk enablement, and post‑launch support.

• Bachelor's degree in a related field, or equivalent education and experience.
• Four or more years of IT support, systems administration, endpoint management, identity, cloud administration, platform engineering, or related technical experience, including hands‑on Microsoft 365 experience.
• Working knowledge of Microsoft 365 services such as Intune, Entra , Conditional Access, Teams, SharePoint, One Drive, Defender, Purview, governance, and reporting.
• Experience administering identity, access, endpoint, policy, application, or collaboration services in an enterprise environment.
• Experience using Power Shell to troubleshoot, administer, report on, or automate enterprise technology services.
• Understanding of modern endpoint, identity, security, least privilege, change control, auditability, reliability, and data protection practices.
• Strong troubleshooting, ownership, prioritization, follow‑through, communication, and cross‑team collaboration skills.

• Relevant Microsoft certifications in Microsoft 365,…