Microsoft 365 Engineer

Microsoft 365 Admin Center (Tenant Administration & Service Operations)

• Own and optimize Microsoft 365 tenant administration via the Microsoft 365 Admin Center across core workloads (Exchange, SharePoint, One Drive, Teams, and related admin portals).
• Manage user and group lifecycle operations, licensing strategy, service health monitoring, and incident communication.
• Define and maintain tenant-wide configuration standards, governance guardrails, and administrative operating procedures.
• Oversee administrative roles and access models (least privilege), including role assignment reviews and privileged access controls where applicable.
• Drive service readiness and change management: feature releases, Message Center review, impact analysis, stakeholder communications, and rollout planning.
• Troubleshoot Microsoft 365 service issues using service health telemetry, audit logs, and diagnostic tooling; coordinate with Microsoft support as needed.
• Produce high-quality documentation: tenant configuration baselines, runbooks, operational playbooks, and escalation procedures.

• Architect, deploy, and optimize Microsoft Defender solutions, including policy and control baselining.
• Implement and tune Defender security controls such as endpoint protection, identity protection, email and collaboration protection, and cloud app security monitoring (as applicable).
• Develop detection and response use-cases, triage workflows, alert tuning, and incident response playbooks.
• Conduct root-cause analysis of security incidents and drive remediation and hardening measures.
• Integrate Defender telemetry with SIEM/SOAR (e.g., Microsoft Sentinel) and standardize operational reporting (KPIs/KRIs).

• Design and deploy information protection and compliance capabilities (e.g., sensitivity labeling, encryption, DLP, retention).
• Implement data governance and lifecycle management aligned to business and legal requirements.
• Configure and maintain compliance policies for Microsoft 365 workloads (Exchange, SharePoint, One Drive, Teams).
• Support eDiscovery, audit, insider risk and information barrier use-cases (where applicable).
• Ensure controls are measurable, auditable, and aligned with relevant frameworks (e.g., ISO 27001, NIST, GDPR).

• Translate business risk and regulatory requirements into technical designs, implementation plans, and operational controls.
• Lead or support migrations and security uplift initiatives, ensuring minimal disruption and strong change management.
• Provide 3rd line support and act as escalation point for complex Microsoft 365 security/compliance and tenant administration issues.
• Coach and upskill internal teams; define standards and guardrails for secure-by-default configurations.