M365 Admin

M365 Admin Location: North Quincy, MA Chicago, IL (Onsite) FTE only Job Description: 10+ years of M365 Administration and Security Understanding of M365 security architecture and compliance frameworks. Administer Exchange Online, Teams, SharePoint, OneDrive, and M365 tenant settings. Manage Entra ID (Azure AD) identities, MFA, Conditional Access, and role-based access. Configure and support Defender for Office 365, Purview DLP, MCAS, and M365 security features. Implement Zero Trust security controls and maintain secure score posture. Handle M365 compliance: retention, sensitivity labels, data governance. Automate admin tasks via PowerShell and generate platform/security reports. Provide L3 support, troubleshoot issues, and collaborate with security teams. 1. Microsoft 365 Administration Manage and administer Exchange Online, SharePoint Online, OneDrive, Teams, and Power Platform. Configure and support M365 groups, licenses, roles, and service settings. Monitor service health, troubleshoot issues, and perform tenant maintenance. Manage user and device lifecycle within Entra ID (Azure AD). 2. M365 Security & Compliance Configure and maintain: Defender for Office 365 Defender for Identity Defender for Endpoint (optional depending on Intune scope) Microsoft Purview (DLP, sensitivity labels, retention policies) Cloud App Security / Defender for Cloud Apps (MCAS) Conditional Access Policies Implement Zero Trust principles across identity, data, and device access. Conduct security monitoring, threat investigation, and remediation. Maintain compliance posture and M365 Secure Score improvements. 3. Identity & Access Management (Entra ID) Manage identity configuration, authentication policies, and MFA. Administer Conditional Access, Privileged Identity Management (PIM), and role-based access controls. Support hybrid identity (Entra Connect / Cloud Sync). 4. Intune / Endpoint Management (optional based on org scope) Configure MDM/MAM policies. Deploy and manage apps, compliance policies, security baselines. Ensure secure device posture across Windows/macOS/iOS/Android. 5. Governance & Compliance Implement M365 governance policies around: SharePoint/Teams provisioning & lifecycle External access & guest access management Data retention, archival, and legal hold Ensure alignment with corporate and regulatory compliance requirements. 6. Automation & Reporting Use PowerShell, Graph API, or Power Automate for automation and bulk administration. Generate reports on security posture, user activity, license usage, and compliance. 7. Collaboration & Support Act as SME for M365 platform and security-related topics. Collaborate with cybersecurity, infrastructure, and compliance teams. Provide L3 support for M365 and security escalations. Educate end-users and business units on best practices. AceStack LLC