QUALIFICATIONS:

• Minimum of 7 years of systems engineering experience with deep specialization in the Microsoft ecosystem (required).

• Expert-level experience with Microsoft 365 services including Entra, Exchange, SharePoint, and Teams.

• Strong, hands-on experience with Microsoft Intune for device and endpoint management.

• Strong experience with SSO and SCIM integrations (SAML, OIDC, and SCIM provisioning) for SaaS and internal applications.

• Hands-on experience with conditional access, MFA, RBAC, identity governance, and PIM

• Experience managing Microsoft 365 licensing and cost optimization.

• Strong PowerShell scripting and Microsoft Graph API automation skills.

• Experience hardening Microsoft environments and supporting compliance frameworks such as ISO 27001:2022 or SOC 2.

• Relevant Microsoft certifications such as SC-300 (Identity and Access Administrator), MD-102 (Endpoint Administrator), or MS-102 (Microsoft 365 Administrator Expert) preferred.

• Strong documentation and communication skills, with the ability to lead technical efforts and work with both technical and non-technical stakeholders.

Critical Qualities:

• Strong sense of ownership over the Microsoft ecosystem end to end.

• Security-first mindset around identity, access, and data protection.

• Architect-level thinking – designs for scale, resilience, and security.

• Clear thinking and composure during incidents and outages.

• Ability to mentor and raise the technical bar across the team.

• Excellent documentation habits.

• Strong organizational skills and attention to detail.

• Effective collaboration across InfoSec, IT, and engineering teams.

• Own the integration of every SaaS application in the portfolio into identity platform (Entra ID) via SAML or OIDC and configure SCIM provisioning.

• Ensure all applications enforce SSO as the sole authentication method and that user provisioning and deprovisioning are automated via SCIM wherever supported.

• Configure and maintain application-level access policies, group assignments, and role mappings within the identity platform.

• Manage identity integrations and access policies using SAML, OAuth, OIDC, and API-based automation.

• Audit SSO and provisioning coverage across the portfolio regularly, closing gaps and remediating applications operating outside centralized identity control.

• Serve as the technical owner for identity-related issues within managed SaaS applications, coordinating with the identity team on cross-platform incidents.

Microsoft 365 Administration

Nice-to-Have:

Virtualization Experience with Promox or VMware