Title:Microsoft 365 Engineer
Location:The position will be based in Princeton NJ, with flexibility to work in our NYC office (currently hybrid) 2-3 days per week in the office with occasional travel between CHDI offices. Only local candidates will be considered.
Reports To:Business Application Manager
Salary Range:$90,000-$145,000. Exact compensation will vary based on experience
Other:Vaccination against COVID-19 is a prerequisite for employment at CHDI Management
Job Description:CHDI Management is seeking a skilled and highly motivated Microsoft 365 Engineer to administer, optimize, and expand CHDI's Microsoft 365 environment. This individual will serve as the internal expert on the M365 platform, ensuring that all services are secure, well-governed, and performing optimally for the organization.
Beyond day-to-day administration, this role carries a forward-looking mandate: actively evaluating and promoting new Microsoft 365 capabilities, driving user adoption across the organization, and championing best practices that help CHDI's staff work more effectively. The successful candidate will manage key platform services including Microsoft Entra ID (Azure AD), Intune, Exchange Online, SharePoint, Teams, and OneDrive, while partnering closely with the Business Application Manager and broader IT team to support ongoing infrastructure and security initiatives.
The successful candidate will:
- Administer and support the full Microsoft 365 environment, including Exchange Online, SharePoint Online, Teams, OneDrive, and related services, ensuring high availability and optimal performance for all CHDI staff.
- Manage Microsoft Entra ID (Azure AD) including user provisioning and lifecycle management, group policies, conditional access policies, and single sign-on (SSO) configurations.
- Administer Microsoft Intune for device enrollment, compliance policy enforcement, application deployment, and endpoint configuration management across Windows and macOS devices.
- Evaluate, pilot, and promote new Microsoft 365 services and features, develop rollout plans and communication strategies to support successful adoption across the organization based on end user input, and present cost-effective options to management.
- Partner with departmental stakeholders to translate functional needs into scalable M365 solutions.
- Drive user adoption of M365 tools by developing training materials, hosting internal workshops, and serving as a go-to resource for staff seeking to get more value from the platform.
- Work with the Security and Cloud Infrastructure Engineer to monitor and maintain security configurations including MFA enforcement, identity protection policies, data loss prevention (DLP) rules, and Microsoft Defender for Microsoft 365 workloads.
- Configure and manage SharePoint Online sites, permissions, and governance policies in coordination with departmental stakeholders.
- Manage Microsoft Teams environments including team provisioning, guest access policies, meeting configurations, and telephony/calling integrations as applicable.
- Manage Microsoft 365 licensing lifecycle including assignment, optimization, and cost control, while tracking usage, adoption trends, and license efficiency to provide data-driven recommendations aligned with organizational needs and budget.
- Create and maintain thorough documentation of system configurations, administrative procedures, and change records.
- Provide Tier 2/3 support for M365-related issues escalated from the helpdesk, troubleshooting connectivity, authentication, and application-level problems.
- Other duties as assigned.
Qualifications:- 3-5 years of hands-on experience administering Microsoft 365 services including Exchange Online, SharePoint, Teams, and OneDrive.
- Demonstrated experience managing Microsoft Entra ID (Azure AD), including conditional access, identity governance, and MFA.
- Experience administering Microsoft Intune for device management, compliance policies, and application deployment across Windows platforms.
- Proven ability to evaluate and promote new technology services, including developing adoption strategies and delivering end-user training.
- Strong understanding of Microsoft 365 security and compliance features, including Defender for M365, DLP, and information protection.
- Experience with Entra, Active Directory, and hybrid identity environments.
- Excellent written and verbal communication skills with the ability to explain technical concepts clearly to non-technical users.
- Strong customer service orientation and demonstrated ability to build effective working relationships across all levels of the organization.
- Ability to self-initiate, manage competing priorities, and effectively solve problems in a fast-paced environment.
Preferred Qualifications:- Familiarity with Microsoft Power Platform (Power Automate, Power Apps) and Microsoft Graph API to support workflow automation, reporting, and system integrations.
- Experience with Microsoft Defender for Endpoint, Purview, or other M365 security and compliance tools.
- Knowledge of ITIL best practices and IT service management frameworks.
Education / Certifications:- A Bachelor's degree in Information Technology, Computer Science, or a related field is required. One or more of the following Microsoft certifications are strongly preferred:
- Microsoft 365 Certified: Administrator Expert (MS-102)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
