Senior M365 & Exchange Engineer

Overview

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.


We seek an experienced Senior M365 & Exchange Engineer with deep expertise in Microsoft 365 services, Exchange Online, Azure Active Directory, and enterprise identity governance. This role focuses on designing, deploying, and managing modern cloud-based productivity, messaging, and identity platforms while ensuring security, stability, and operational excellence across the Microsoft 365 ecosystem.

The ideal candidate will have hands-on experience with Microsoft 365 administration, identity and access management, Exchange Online, and hybrid identity integrations, along with strong knowledge of governance, security, and compliance best practices.

Why Join Us?

• Work in a dynamic, cloud-forward environment, modernizing enterprise identity, email, and collaboration platforms.
• Lead initiatives across Microsoft 365 security, automation, and platform governance.
• Gain hands-on experience with enterprise-scale identity systems, cloud security controls, and Zero Trust implementation.

SPA has an immediate need for an On-site/Hybrid/Remote Senior M365 & Exchange Engineer.

Responsibilities

1. Microsoft 365 & Exchange Online Administration

• Design, deploy, and manage Exchange Online environments to ensure secure, reliable, and efficient messaging services.
• Administer mail flow, connectors, transport rules, distribution groups, shared mailboxes, resource accounts, auditing configurations, and retention policies.
• Maintain and optimize Exchange Online Protection (EOP) and Defender for Office 365 to manage threats, filter spam, and ensure message hygiene.
• Perform advanced troubleshooting for email delivery, hybrid mail flow, secure mail routing, and service health issues.
• Support migrations, tenant integrations, and lifecycle-management activities.

1. Identity & Access Management

• Administer Azure Active Directory (Azure AD) / Entra ID, including users, groups, roles, conditional access, and identity governance.
• Manage authentication and access controls, including Conditional Access, MFA, SSO, and passwordless capabilities.
• Support hybrid identity solutions such as Azure AD Connect / Entra Connect, federation services, pass-through authentication, MFA/SSO integrations, and synchronization technologies.
• Implement and enforce RBAC , least privilege, privileged identity management (PIM), and identity security best practices.
• Manage enterprise application integrations, app registrations, service principals, OAuth permissions, and SaaS identity lifecycle.

1. Microsoft 365 Platform Administration

• Manage and support Office 365 services, including SharePoint Online, OneDrive for Business, Microsoft Teams, and compliance tools.
• Apply and maintain governance models, including DLP policies, retention policies, information protection labels, and data security controls.
• Monitor and improve tenant posture using Microsoft Secure Score , audit logs, and compliance center insights.
• Support cross-platform integrations across Microsoft 365 workloads to ensure a consistent, secure user experience.

1. Security, Compliance & Governance

• Ensure compliance with frameworks such as, NIST SP 800-171 , CMMC , and ISO 27001 as they apply to Microsoft 365 and identity environments.
• Support Microsoft Purview, retention policies, information protection labels, and data protection initiatives.
• Implement cloud security hardening, conditional access baselines, authentication protections, and auditing policies.
• Contribute to security assessments, audits, incident response processes, and remediation activities.

1. Monitoring, Troubleshooting & Optimization

• Monitor service health and performance across Microsoft 365 and Azure AD using built-in and enterprise monitoring tools.
• Conduct root cause analysis for identity, messaging, and authentication issues impacting user experience and system availability.
• Develop automation and alerting using PowerShell, Microsoft Graph API, or Azure automation tools to enhance operational efficiency.

1. Collaboration, Support & Documentation

• Partner with infrastructure, endpoint, networking, cybersecurity, and application teams to deliver integrated solutions.
• Provide Tier III support and mentor junior administrators and support personnel.
• Engage with vendors and managed service providers to resolve issues and implement enhancements.
• Document configurations, operational procedures, governance policies, and architectural decisions for knowledge sharing.

Qualifications

Required Qualifications

Education:

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience.

Experience:

• 8+ years of system administration experience with Microsoft technologies.
• 5+ years administering Microsoft 365, Exchange Online, and Azure AD.
• Experience with hybrid identity, authentication services, and cloud security.

Technical Skills:

• Strong expertise in Exchange Online, Azure AD, and Microsoft 365 administration.
• Hands-on experience with identity governance, conditional access, MFA/SSO, and app registration.
• Strong scripting skills using PowerShell, Azure CLI, or Graph API.

Soft Skills:

• Strong troubleshooting and analytical skills.
• Excellent communication and cross-functional collaboration abilities.
• Ability to document technical solutions, governance, and best practices.

Preferred Qualifications

• Knowledge of NIST SP 800-53, NIST SP 800-171, CMMC, FedRAMP, or similar cybersecurity frameworks.
• Experience supporting Microsoft 365 GCC, GCC High, or other regulated environments.
• Familiarity with Microsoft Purview, Intune, Defender, and Zero Trust architectures.
• Experience with Exchange hybrid deployments and Entra Connect.
• Experience with automation tools, identity lifecycle workflows, or multi-cloud identity.
• Relevant Microsoft certifications, such as:
• Microsoft 365 Certified: Messaging Administrator Associate (MS-203)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft 365 Certified: Administrator Expert

Desired Attributes

• Strong analytical and problem-solving skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Commitment to operational excellence and continuous improvement.
• Collaborative approach with both technical and non-technical stakeholders.
• Focus on delivering secure, reliable, and scalable services that enable the mission and enhance the user experience.

Pay Range Information

At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Virginia, Pay Transparency Salary range: USD $140,000.00/Yr. - USD $160,000.00/Yr.