Systems Engineer I - M365

The Systems Engineer I – M365 is a mid-level position within EdFed Credit Union’s IT Infrastructure Team, with a primary specialty in Microsoft 365, Azure cloud services, identity management, and endpoint administration. This role is responsible for administering the M365 tenant, Entra ID, Intune, and the Microsoft security and compliance stack while contributing equally to shared team responsibilities spanning servers, networking, unified communications, and security operations. The position is structured as a 50/50 split between M365/cloud specialty duties and shared IT Infrastructure Team responsibilities, ensuring cross‑functional coverage and operational resilience across all infrastructure domains. Duties & Responsibilities: Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance. Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls. Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes. Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption. Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync). Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks. Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint. Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms. Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers). Collaborate with IT Security on Sentinel alerting, automation, and tuning. Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation. Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits. Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management. Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing. Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination. Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support. Troubleshoot voice quality and connectivity issues across sites. Assist with basic network troubleshooting and hybrid connectivity components. Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control. Support change management, user adoption, and evaluation of new Microsoft features and security best practices. Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation. Monitor systems and networks to proactively address alerts and performance issues. Use AI powered tools to enhance productivity and operational efficiency. Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team. Maintain runbooks, configuration guides, and knowledge base documentation. Complete or participate in additional duties or projects as assigned by management. Requirements: Associate's degree or equivalent combination 5-7 years of experience in systems engineering, M365 administration, cloud operations, or a related IT role Job Qualifications & Specifications: Strong hands‑on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive). Working knowledge of Microsoft Entra ID (Azure AD), conditional access, hybrid identity (Azure AD Connect), and SSO protocols (SAML, OAuth/OIDC). Experience configuring and managing Microsoft Intune for device enrollment, compliance, application deployment, and Autopilot. Experience with email security administration including DMARC, DKIM, SPF, and secure mail gateway management (Proofpoint or equivalent). Familiarity with Active Directory administration including replication, Group Policy, and CIS benchmark hardening. Proficiency in PowerShell scripting and Microsoft Graph API / Graph PowerShell SDK for automation and reporting. Hands‑on experience with Windows Server administration (2016/2019/2022), Microsoft Hyper‑V, DNS, DHCP, and basic networking concepts. Strong analytical, troubleshooting, documentation, and communication skills. Ability to participate in on‑call rotation and after‑hours maintenance as needed. Every employee is required to comply with all Bank Secrecy Act (BSA) policies and procedures, and to attend required BSA‑related training as assigned. Benefits Offered: Paid Holiday Paid Birthday Paid Sick and Personal Days Paid Vacation Retirement/401K with matching contributions Medical, Dental and Vision Insurance Life Insurance and Long Term Disability Tuition reimbursement for Undergraduate and Graduate courses Career opportunities About Us: As a financial institution, EdFed has been dedicated to providing our members, the South Florida educational community, with quality financial services since 1935. As an employer, we strive to provide staff with challenging career opportunities, great benefits, and a friendly work environment. Confidentiality is of the utmost importance in this position. #J-18808-Ljbffr Educational Federal Credit Union