Engineer, Microsoft 365

Pay Range: $95,700.00/Yr.

- $/Yr.

Benefits on Day 1:

• Health/Rx
• Vision
• Flexible and health spending accounts (FSA/HSA)
• Supplemental life insurance
• 401(k)
• Paid time off
• Short term & long term disability coverage (STD/LTD)
• Employee stock ownership (ESOP)
• Holiday pay for company designated holidays

At KeHE, we’re obsessed with creating solutions, unboxing potential, and serving others - and it all starts with you. As an employee‑owned distributor of natural and organic, specialty, and fresh products, we’re committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you’ll be embarking on a career that’s moving forward. When you join KeHE, you’re becoming part of a team that is a force for good.

KeHE is seeking a highly skilled Microsoft 365 Engineer to lead the design, administration, security, and continuous improvement of our Microsoft 365 environment. In this role, you will help drive secure collaboration, modern identity management, platform governance, and AI‑powered productivity across SharePoint Online, Microsoft Teams, Entra , and Microsoft Copilot. The ideal candidate is a forward‑thinking technology professional with deep Microsoft 365 expertise, strong solution design and governance experience, and a security‑first mindset.

Hands‑on experience implementing and managing emerging technologies, including Copilot and its agents, is strongly preferred.

• Administer the Microsoft 365 tenant including configuration, licensing, subscriptions, service health, and RBAC.
• Automate tenant operations using Power Shell, Microsoft Graph, and administrative APIs.
• Enforce tenant‑wide policies for security, compliance, governance, external sharing, and lifecycle management.
• Evaluate and validate roadmap and preview features before production rollout; conduct tenant health assessments and drive continuous improvements to performance, security, and adoption.

• Administer Microsoft Entra  Conditional Access, MFA, passwordless authentication, SSO, PIM, B2B/B2C Integrations and identity governance.
• Manage hybrid identity with Active Directory and Entra Connect.
• Implement and support Zero Trust controls across Microsoft 365.
• Monitor identity security posture, remediate risks using Microsoft Defender for Identity, and support identity, access, and governance compliance initiatives.
• Configure and maintain sensitivity labels, retention policies, and information protection policies in Microsoft Purview.

• Design, deploy, and maintain SharePoint Online architecture and governance standards.
• Configure and manage SharePoint Online, One Drive, and Teams integrations to support intranet, document management, and collaboration solutions.
• Execute and support content migrations and information architecture improvements.
• Implement site lifecycle management, provisioning standards, external sharing controls, and governance policies.

• Deploy and configure Microsoft Copilot for Microsoft 365 including readiness assessments, phased rollout, and adoption programs.
• Implement and support Copilot Studio agent lifecycle from proof‑of‑concept through production, enforcing least‑privilege access and change management procedures.
• Assist in developing governance standards and data classification requirements for Copilot and its agents in partnership with Security and the AI committee.
• Partner with business stakeholders to identify AI‑driven productivity opportunities and translate them into governed solutions.
• Monitor Copilot adoption, effectiveness, and security impacts; report outcomes to IT leadership.

• Maintain secure configurations across all M365 platforms aligned with NIST and CIS frameworks; drive Secure Score improvements, Compliance Manager remediations, and tenant hardening initiatives.
• Support security audits, regulatory requirements, and policy compliance across the M365 environment.

• Provide Level 2/3 support, troubleshooting, and root cause analysis for Microsoft…