Senior Technical Engineer

Job Description

About Us

Shermen Bank International is a specialized Edge Act Corporation, chartered by the Federal Reserve, dedicated to providing premier international banking and financial services. Based in Washington, D.C., the institution delivers tailored financial solutions designed to meet the unique and complex needs of foreign governments, state-owned enterprises, and multilateral organizations. Operating in a highly regulated, high-touch environment, Shermen Bank International is committed to the highest standards of security, compliance, and client service. 

Position Summary

Shermen Bank International is seeking a Senior Technical Engineer , responsible for the administration, optimization, security, governance, and operational support of the Bank's Microsoft 365 tenant. This role serves as a senior-level technical resource for Microsoft 365 services, ensuring secure, compliant, and highly available collaboration and productivity platforms across the organization.

The successful candidate will have deep expertise in Microsoft 365 E5 technologies, including Entra ID (Azure AD), Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Defender, Microsoft Purview, and Intune. The role also requires intermediate skills in Power Automate and Power Apps to support business process automation and low-code application development initiatives.

This position will collaborate closely with Information Security, Infrastructure, Compliance, Risk Management, and business stakeholders to ensure Microsoft 365 services align with banking regulatory requirements and cybersecurity best practices.

Given the Bank’s focus on serving foreign governments, embassies, and consulates, the ideal candidate will demonstrate exceptional attention to detail, sound judgment, professionalism, and discretion. 

Core Responsibilities:

Microsoft 365 Tenant Administration

\n
• Manage and maintain the Bank's Microsoft 365 E5 tenant.
\n
• Administer Microsoft Entra ID (Azure AD), authentication services, Conditional Access, MFA, and identity governance.
\n
• Configure and manage Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft 365 Groups.
\n
• Perform tenant health monitoring, system optimization, and capacity management.
\n
• Manage Microsoft 365 licensing, user provisioning, and access management.
\n
• Maintain and enforce governance policies across Microsoft 365 workloads.
\n

Security & Compliance

\n
• Implement and maintain Microsoft Defender security solutions, including Defender for Office 365 and Defender for Endpoint.
\n
• Configure and manage Microsoft Purview compliance features, including: 
\n
• Data Loss Prevention (DLP)
\n
• Retention Policies
\n
• Information Protection
\n
• eDiscovery
\n
• Insider Risk Management
\n
• Support audit, regulatory, and compliance requirements applicable to the banking industry.
\n
• Monitor security alerts and investigate potential threats or incidents.
\n
• Develop and maintain security baselines and best practices.
\n

Endpoint & Device Management

\n
• Administer Microsoft Intune for endpoint management and device compliance.
\n
• Deploy and manage device configuration profiles, application deployment, and security policies.
\n
• Support Windows device lifecycle management and endpoint security initiatives.
\n

Power Platform Support

\n
• Develop and maintain basic Power Automate workflows to streamline business processes.
\n
• Support departmental automation requests using Power Automate.
\n
• Create and maintain simple to moderate Power Apps solutions for operational teams.
\n
• Assist business users with Power Platform adoption and best practices.
\n
• Ensure Power Platform solutions comply with governance and security requirements.
\n

Operations & Support

\n
• Serve as a Level 3 escalation point for Microsoft 365-related incidents and service requests.
\n
• Troubleshoot complex issues involving identity, messaging, collaboration, and security services.
\n
• Support Microsoft 365 upgrades, feature implementations, and platform enhancements.
\n
• Maintain technical documentation, operational procedures, and architecture diagrams.
\n
• Participate in disaster recovery, business continuity, and incident response activities.
\n

Project & Stakeholder Engagement

\n
• Lead Microsoft 365 infrastructure projects and platform improvement initiatives.
\n
• Work closely with cybersecurity, compliance, and audit teams.
\n
• Provide technical guidance and mentorship to junior engineers and administrators.
\n
• Evaluate and recommend emerging Microsoft technologies and best practices.
\n

Ideal Candidate Profile

·       5+ years of Microsoft 365 administration and engineering experience.

·       3+ years managing enterprise Microsoft 365 E5 environments.

·       Experience supporting highly regulated environments such as: banking, healthcare, government.

·       Experience with Microsoft security and compliance technologies.

Preferred Certifications and Experience:

·       Microsoft Certified: Microsoft 365 Administrator Expert

·       Microsoft Certified: Identity and Access Administrator Associate

·       Microsoft Certified: Security Administrator Associate

·       Microsoft Certified: Power Platform Fundamentals (PL-900)

·       Microsoft Certified: Power Platform App Maker Associate (Preferred)

·       Experience in financial services or banking environments.

·       Familiarity with FFIEC, SOX, PCI-DSS, GLBA, and other banking regulatory frameworks.

·       Experience with security operations, SIEM integration, and cloud governance.

Why This Role?

This is a unique opportunity to join a growing international financial institution serving the global diplomatic community. The Senior Technical Engineer will play an important role in supporting critical banking operations while helping to build a strong IT foundation within a highly specialized banking environment