Lead Microsoft Platforms Engineer

Lead Microsoft Platforms EngineerEnterprise Infrastructure | Information Technology ServicesDepartment OverviewUniversity of Virginia Information Technology Services (ITS) supports UVA’s academic, research, clinical, and administrative missions by providing secure, reliable, and innovative technology services. The Enterprise Infrastructure division designs, operates, and continuously improves the enterprise platforms used across the University. ITS values results, teamwork, innovation, excellent customer service, inclusion, and work-life balance, and fosters a supportive environment where employees are encouraged to share ideas and bring their authentic selves to work. Benefits for eligible employees include multiple health plan options; dental, vision, and life insurance; flexible spending accounts; 22 days of paid time off annually plus 12 or more paid holidays; eight weeks of paid parental leave; short-term disability coverage; and tuition and professional-development support.Position SummaryUVA ITS is seeking a Lead Microsoft Platforms Engineer to join the Enterprise Infrastructure division. This role serves as the lead engineer, primary technical contact, and subject matter expert for critical Microsoft services, including Microsoft 365, enterprise email, Microsoft Defender, Entra ID, Active Directory, and related Azure services.The Lead Microsoft Platforms Engineer provides technical leadership across service design, administration, security, automation, incident response, and continuous improvement. The successful candidate will bring deep experience across the Microsoft ecosystem, including Microsoft 365 integrated applications, hybrid messaging and identity environments, secure email gateways, and emerging Microsoft AI capabilities such as Copilot, Copilot Studio, and Copilot agents. This position is responsible for secure, reliable, and efficient service delivery; responsive customer support; and timely resolution of complex technical issues.ResponsibilitiesLead service ownership and technical direction for core Microsoft platforms, serving as the lead engineer and subject matter expert for Microsoft 365, Exchange Online and enterprise email, Teams, SharePoint, OneDrive, Bookings, shared mailboxes, distribution lists, room calendars, Power Platform, Microsoft Fabric, Entra ID, and Active DirectoryEngineer and administer enterprise messaging services, including Exchange Hybrid provisioning and attributes, inbound and outbound mail routing, mail flow rules, connectors, message tracing, domain and DNS configuration, DMARC, FortiMail, Microsoft Defender policies, quarantine monitoring, and anti-spam, anti-virus, anti-malware, and anti-phishing controlsDesign and manage identity and access services, including Conditional Access, Privileged Identity Management, role-based access control, single sign-on, multifactor authentication, user and group lifecycle, provisioning and licensing, Entra B2B and external collaboration, guest access, app registrations, enterprise applications, directory synchronization, and the Entra consent frameworkDevelop and support enterprise integrations and automation using Microsoft Graph API, Azure Functions, Automation Runbooks, Copilot, Copilot Studio, Copilot agents, and Microsoft Fabric workspaces, capacities, access controls, licensing, and governanceSupport related Azure infrastructure and networking services, including virtual machines, Network Security Groups, firewalls, Traffic Manager, load balancers, ARM templates, provisioning, monitoring, and platform connectivityEnsure secure and reliable operations through monitoring, alerting, tuning, escalation, SIEM tools such as Splunk, Microsoft Sentinel, and Azure Monitor, advanced troubleshooting, incident response, Tier 3 help desk escalation, M365 entitlement and information management, permissions management, and service lifecycle governanceDrive operational excellence and continuous improvement by developing service roadmaps, introducing new service offerings, maintaining thorough product and technical documentation, owning knowledge-base content, mentoring engineers, leading cross-functional initiatives, delivering excellent customer service, and performing other duties as assignedMinimum QualificationsEducationBachelor’s degree in Computer Science, Information Systems, or a related field; relevant experience may be considered in lieu of a degreeExperienceAt least five years of relevant experience administering Microsoft 365, Exchange, Windows Server, Active Directory, and Azure in a mid-sized to large enterprise environmentProven experience designing, implementing, and supporting Microsoft 365 solutions, including Exchange Online, Teams, SharePoint Online, and OneDriveExperience supporting hybrid environments, including Exchange Hybrid, migrations, directory synchronization, and Entra ID integrations such as single sign-on and Conditional AccessExperience implementing and managing identity and access solutions, including single sign-on, multifactor authentication, Conditional Access, role-based access control, and Entra Privileged Identity ManagementExperience supporting enterprise integrations and automation using platform administration or scripting tools, including Azure Functions and Automation RunbooksExperience with Microsoft Defender EDR/XDR capabilities, including anti-spam, anti-phishing, anti-malware, quarantine, and related security-policy administrationExperience administering a secure email gateway such as FortiMail, including mail routing and Anti-X policy configuration for anti-spam, anti-virus, anti-malware, and anti-phishing protectionDemonstrated ability to troubleshoot complex infrastructure and cloud-platform issues and support advanced incident responseDemonstrated ability to communicate complex technical concepts to technical and non-technical audiencesStrong customer-service orientation, collaborative problem-solving skills, written and verbal communication skills, and ability to coordinate across multiple groups to complete projects on timePreferred QualificationsEducationMaster’s degree in Computer Science, Information Systems, or a related fieldExperienceEight or more years of experience supporting hybrid Microsoft environmentsFamiliarity with Microsoft AI capabilities, including Copilot, Copilot Studio, agent development, deployment, and governanceMicrosoft Fabric administration experience, including workspace provisioning, access control, licensing, governance, and capacity managementExperience with Microsoft Graph API, enterprise application integrations, and the Entra consent frameworkExperience with SIEM and monitoring technologies such as Splunk, Microsoft Sentinel, and Azure MonitorExperience supporting enterprise security, information management, entitlement management, and governance initiativesExperience working in higher education or another large, complex enterprise environmentStrong proficiency with FortiMail or similar secure email gateway systems, including mail routing, transport policies, and Anti-X tuningExperience managing Microsoft 365 domains, DNS, and DMARC configurationFamiliarity with Azure virtual-machine provisioning, ARM templates, Traffic Manager, and load-balancer provisioning and monitoringExperience mentoring engineers and leading cross-functional technical initiativesExperience developing roadmaps, creating product documentation, deploying new service offerings, and driving continuous improvementExperience managing and resolving critical-service incidents using ServiceNow or a comparable IT service management platformPhysical DemandsThis is primarily a sedentary job involving extensive use of desktop computers. The job does occasionally require traveling some distance to attend meetings or programs.Position Type and Work LocationThis is an exempt-level, benefited position. Learn more about UVA benefitsThis is a fully remote position in accordance with UVA ITS remote work guidelinesAbout UVA and the CommunityTo learn more about UVA and in the Charlottesville area, visit UVA Life and Embark CVA.Additional RequirementsBackground checks will be conducted on all new hires prior to employmentEducation verification will be required prior to employmentThis position will not consider candidates who require immigration sponsorship now or in the futureHow to ApplyPlease apply online, by searching for requisition number R0085760. Complete an application with the following documents: Resume Cover LetterUpload all materials into the resume submission field. You can submit multiple documents into this one field or combine them into one PDF. Applications without all required documents will not receive full consideration.Internal applicants: Search and apply for jobs on the UVA Internal Careers website. Reference Check ProcessReference checks will be completed by UVA’s third-party partner, SkillSurvey, during the final phase of the interview. Five references will be requested, with at least three responses required.ContactFor questions about the application process, please contact Bill Crane, Senior Recruiter, at View email address on click.appcast.io University of Virginia is an equal opportunity employer. All interested persons are encouraged to apply, including veterans and individuals with disabilities. Learn more about UVA’s commitment to non-discrimination and equal opportunity employment.Job SummaryJob number: R0085670Profession: Information Management, Services & Technology