About this role
Job description
Key Responsibilities
Identity & Access (Entra ID)
- Administer Entra ID: user and group lifecycle, enterprise app registrations, SSO integrations, and hybrid identity sync
- Implement and maintain conditional access policies, MFA enforcement, and device compliance requirements
- Operate privileged identity management (PIM) workflows; maintain access review cadence and evidence
- Support device compliance remediation across the endpoint fleet, including admin-portal access hardening
Microsoft 365 & Endpoint
- Administer Exchange Online, SharePoint/OneDrive, and Teams (including Teams telephony readiness)
- Manage Intune: enrollment, configuration profiles, compliance policies, application deployment, and patch rings
- Support the TLCx Hub SharePoint environment and Viva Learning integrations
Azure Infrastructure
- Build and operate Azure IaaS/PaaS resources per US-defined architecture: networking, compute, storage, backup
- Implement Azure Monitor, cost management hygiene, and tagging standards
- Execute migration runbooks for on-premises workloads moving to Azure
Required Qualifications
- 4-8 years administering Microsoft 365 and Entra ID in enterprise environments (1,000+ seats preferred)
- Production experience with conditional access, Intune device management, and hybrid identity
- Hands-on Azure infrastructure experience (compute, networking, storage, backup/DR)
- PowerShell proficiency for administration at scale; Microsoft Graph experience preferred
- MS-102, AZ-104, or SC-300 certification (at least one required)
- Strong written and spoken English
Preferred
- Experience in BPO or managed services environments with client-driven security requirements
- Exposure to Power Platform governance (Power Automate, Copilot Studio)
- Experience supporting compliance frameworks (SOC 2, HIPAA, PCI-DSS)