Senior MS 365 Systems Engineer / Architect

Salary: $85,000 - 125,000 per year Requirements:

• At least 8 years of enterprise systems engineering experience, including 5 or more years focused on cloud-native Microsoft 365 infrastructure and architecture.
• Demonstrated expertise managing fully cloud-based environments without hybrid dependencies such as on-premises Active Directory, hybrid Exchange servers, or write-back configurations.
• Advanced knowledge of Microsoft Entra ID governance, Conditional Access design, and identity security.
• Extensive experience managing global device fleets with Microsoft Intune, including provisioning workflows and custom application deployments.
• Hands-on experience with Microsoft Purview data protection policies, records management, and discovery tools.
• Strong PowerShell scripting skills using the Microsoft Graph SDK and modern APIs to automate tenant configuration.
• Preferred certifications include Microsoft 365 Certified: Enterprise Administrator Expert, MCSA, or MCSE.

• Serve as the principal technical authority for our cloud infrastructure and improve the security, optimization, and governance of our Microsoft 365 environment.
• Assess and optimize Microsoft Entra ID settings, establish Conditional Access policies, deploy phishing-resistant MFA, configure identity protection, standardize administrative roles with PIM, and secure external collaboration.
• Design and deploy Intune configuration, compliance, and application protection profiles for Windows, macOS, and mobile devices.
• Improve cloud-based device provisioning with Windows Autopilot and Apple Business Manager, automate patching through Windows Update for Business, and establish security baselines.
• Review and optimize Exchange Online, SharePoint Online, and Microsoft Teams performance, organization, and sharing settings.
• Configure Microsoft Purview DLP rules, sensitivity labels, and retention schedules, and implement governance for Teams lifecycles, guest access reviews, and application permissions.
• Remediate tenant vulnerabilities to improve our Microsoft Secure Score and overall security posture.
• Configure audit logs, alerts, and diagnostic data integrations with our security monitoring systems.
• Prepare architecture documentation, governance charters, and operational runbooks to support handover to our internal IT team at project completion.

• Active Directory
• Architect
• Cloud
• Support
• macOS
• Microsoft 365
• Microsoft Intune
• Mobile
• PowerShell
• Security
• SharePoint
• Windows
• Office 365
• API
• Hardware

More:

We are Ekman Associates, a management consulting firm focused on business, digital, and technology strategy, solution delivery, and human resource needs. We are seeking a senior Microsoft 365 Systems Engineer / Architect for a hybrid role in Irvine, California. The position focuses on optimizing and securing our cloud-native Microsoft 365 environment.

last updated 41 week of 2026