M365 Engineer

The Company STACK INFRASTRUCTURE (STACK) provides digital infrastructure to scale the world’s most innovative companies. We are an award‑winning industry leader in building, owning, and operating highly efficient, cost‑effective wholesale, colocation, and cloud data centers. Each of our national facilities meets or exceeds the highest industry standards in all operational categories of availability, security, connectivity, and physical resilience. STACK offers the scale and geographic reach that rapidly growing hyperscale and enterprise companies need. The world runs on data. Data runs on STACK. The Position We are seeking a highly skilled and experienced Microsoft 365 Engineer/Administrator to own and operate our enterprise M365 platform across a global, multi‑region environment. This role is responsible for the full lifecycle management of Exchange Online, Microsoft Teams, SharePoint Online, Azure Active Directory (Entra ID), Microsoft Intune, and related cloud services. Responsibilities Serve as the primary administrator for the Microsoft 365 tenant, managing Exchange Online, SharePoint Online, Microsoft Teams, OneDrive for Business, and the broader M365 suite across global operations. Configure, maintain, and optimize Azure Active Directory (Entra ID), including user lifecycle management, conditional access policies, authentication methods, and role‑based access controls. Design and implement M365 governance frameworks encompassing sensitivity labels, DLP policies, retention policies, and Microsoft Purview compliance controls. Manage Microsoft Teams administration, including policies, voice/telephony configurations, guest access, and Teams app governance. Administer SharePoint Online site collections, hub sites, permissions architecture, and storage management; diagnose and remediate unique permissions threshold issues. Manage email security stack including EOP, Microsoft Defender for Office 365, anti‑phishing/anti‑spam policies, DKIM, DMARC, and SPF configurations. Administer and enforce DLP, information barriers, eDiscovery, and audit logging in alignment with regulatory and corporate compliance requirements. Support IT SOX compliance controls, COBIT 2019, and NIST SP 800‑53 frameworks as they relate to M365 platform security and data protection. Monitor, investigate, and respond to security incidents and alerts within the M365 Defender portal and Azure Security Center. Implement and manage Conditional Access policies and Zero Trust security principles across the M365 ecosystem. Administer Microsoft Intune for MAM and MDM across Windows, macOS, iOS, and Android platforms. Design, deploy, and maintain Windows Autopilot and Kandji enrollment profiles, compliance policies, and configuration profiles for global end‑user device fleets. Manage Patch My PC integration with Intune for automated third‑party application patching across Windows endpoints. Support end‑to‑end EUC lifecycle, including device provisioning, image management, application packaging, and hardware refresh planning for Mac and Windows environments. Implement temporary local admin elevation solutions integrated with Entra ID and ITSM workflows. Design and manage SSO integrations with SaaS and on‑premises applications via Entra ID Enterprise Applications and SAML/OIDC protocols. Implement SCIM provisioning for automated user lifecycle management across connected applications. Administer on‑premises Active Directory, Azure AD Connect / Cloud Sync, and hybrid identity configurations. Manage DNS, domain registration, and domain administration across corporate domains tied to the M365 tenant. Maintain Entra ID governance features including access reviews, PIM, and entitlement management. Support Azure cloud infrastructure components that underpin or integrate with the M365 platform, including Azure Virtual Networks, App Services, and Storage. Collaborate with architecture teams on Azure‑based solutions such as AI Search, Azure AI Foundry, Cosmos DB, and Databricks integrations. Manage Azure subscriptions, resource groups, cost management, and tagging strategies relevant to M365‑adjacent workloads. Implement and maintain Azure Monitor, Log Analytics, and alerting for M365 and Azure service health. Develop and maintain PowerShell scripts and automation workflows using PnP, Microsoft Graph, and Azure PowerShell modules. Integrate M365 services with FreshService (or equivalent ITSM platform) for change management, incident management, and service catalog workflows. Create and maintain technical documentation, runbooks, SOPs, and knowledge base articles for M365 administration and support procedures. Provide Tier 2/Tier 3 support for M365‑related incidents and service requests, collaborating with global support teams and Microsoft Premier Support. Participate in CAB processes for M365 platform changes. Monitor M365 service health, plan for capacity, and lead platform upgrades, feature rollouts, and license optimization initiatives. The Details Location: Denver, CO Travel: Up to 30% Benefits: Healthcare, Dental Care, Vision Insurance, Life Insurance, Paid Time Off, and Paid Leave Programs Must be eligible to work in the United States Must pass comprehensive background and drug screening Must‑have Qualifications Bachelor’s degree in Information Technology, Computer Science, or a related field; or equivalent professional experience. 7+ years of progressive experience in Microsoft 365 administration and enterprise IT, with at least 3 years in a senior or lead capacity. Deep expertise across Exchange Online, SharePoint Online, Microsoft Teams, Intune, Entra ID and Microsoft Purview. Strong proficiency with PowerShell scripting for M365 automation. Hands‑on experience with Intune MDM/MAM, Windows Autopilot, macOS management (Kandji or JAMF), and Patch My PC. Experience implementing enterprise SSO (SAML/OIDC), SCIM provisioning, and hybrid identity architectures. Solid understanding of email security (EOP, Defender for O365, DKIM/DMARC/SPF) and Zero Trust security frameworks. Experience with Azure cloud services and familiarity with Azure AI/data services. Knowledge of ITSM frameworks (ITIL) and tools such as FreshService, ServiceNow, or equivalent. Excellent communication skills with the ability to produce executive‑ready documentation and present to senior leadership. Compensation Range $128,260.00 - $146,017.59 This Might Be Right For You If You are a strong communicator, persuasive and clear, blending analytics with experience in decision‑making. You can juggle multiple priorities while balancing urgent requests with shifting timelines and deliverables. You are a team builder, developing the strengths of your resources while formulating long‑term plans for growth and success. You are naturally curious and driven toward continual improvement, reviewing and analyzing campaigns for future learning.

WHY STACK?

Competitive compensation package with strong benefits, including medical, dental, vision insurance, 401K program, flexible spending accounts, and a cell‑phone subsidy. Culture of appreciation, peer‑to‑peer recognition, and rewards programs. Events, game nights, happy hours, and barbecues. Growth opportunities – this is a great time to join and make an impact. STACK is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, mental or physical disability, genetic information, veteran status, or any other status protected by federal, state, or local law. #J-18808-Ljbffr STACK Infrastructure