The
Platform Engineer is a core technical contributor within the Enterprise IT organization, helping build and operate the systems, automation, and integrations that power Corporate IT and Fullsteam's Microsoft 365 and Azure environment. Partnering with the Senior Platform Engineer, the Platform Engineer helps build and maintain the Enterprise IT GitHub pipeline, develops APIs and integrations, co-manages the Model Context Protocol (MCP) connectors that integrate the organization's AI tools with enterprise data, strengthens identity and data security, and provides technical guidance to AI platforms and projects across the organization. This role combines hands-on platform engineering with a growing ownership mindset, delivering secure, scalable, and repeatable solutions in a fast-paced, acquisition-driven environment.
Primary Responsibilities:- Build and maintain the Enterprise IT GitHub pipeline alongside the Senior Platform Engineer, including CI/CD workflows, branching strategies, and automation standards.
- Develop and maintain automated playbooks and tooling that support rapid, low-error operations.
- Design, develop, and maintain APIs and integrations (such as RESTful APIs) that connect enterprise systems, services, and data.
- Co-manage the Model Context Protocol (MCP) connectors that integrate the organization's AI tools with enterprise data and services, ensuring secure, least-privilege access.
- Strengthen identity and data security across Microsoft 365 and Azure, including Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, and Microsoft Purview data loss prevention (DLP), sensitivity labels, and data classification.
- Provide technical guidance to AI platforms and projects across the organization, advising on architecture, integration, and secure access to Microsoft 365 and Azure data.
- Build and maintain Azure infrastructure to support scalable and secure enterprise solutions.
- Implement and maintain identity and access management day-to-day, including SSO integrations (SAML and OIDC), SCIM-based user and group provisioning, role-to-group mapping, Entra ID app registrations, and scoping of Microsoft Graph API permissions to least privilege, following the architecture and standards set by the architect and Senior Platform Engineer.
- Administer the Microsoft 365 tenant and help maintain its governance posture, including SharePoint Online and Exchange Online policy configuration, retention and sharing controls, tracking and remediating Microsoft service deprecations and roadmap changes, and data recovery and restore operations.
- Implement security measures and monitor configurations to protect data and maintain compliance.
- Partner with Corporate IT, Business Units, and stakeholders to translate requirements into scalable engineering solutions, and maintain clear documentation and standards.
Skills & Competencies:- Experience across Microsoft 365, including Exchange Online, OneDrive/SharePoint Online, Teams, and Power Platform.
- Experience in cloud computing and architecture, specifically Microsoft Azure.
- Experience building and maintaining CI/CD pipelines and automation workflows using GitHub Enterprise.
- Experience designing and developing APIs and integrations, such as RESTful APIs.
- Experience with identity and data security controls, including Conditional Access, Privileged Identity Management (PIM), and Microsoft Purview (DLP, sensitivity labels, information protection).
- Familiarity with enterprise AI platforms and integrating AI tools via connectors, such as the Model Context Protocol (MCP).
- Experience in Identity & Access Management, SSO, and MFA implementations using Entra ID.
- Experience with cyber security controls and best practices in cloud environments, specifically Microsoft Defender tools.
- Proficiency in scripting and automation with PowerShell, Python, BASH, and/or Bicep.
- Strong communication and collaboration skills with both technical and non-technical stakeholders.
- Strong team player who delivers client-focused solutions and continually improves processes.
Minimum Qualifications:- 5+ years of combined professional experience and education in Information Technology, Information Systems, Software Engineering, Cyber Security, or a related field.
- Bachelor's degree in Computer Science, Software Engineering, Management Information Systems, Cyber Security, or a related field (4+ years of relevant work experience may substitute for a degree).
- Experience building and maintaining CI/CD pipelines and automation using GitHub Enterprise (or a comparable platform).
- Experience developing and integrating APIs (such as RESTful APIs).
- Proficiency in PowerShell and/or Python scripting.
Preferred Qualifications:- Experience building or integrating AI tool connectors (e.g., Model Context Protocol / MCP).
- Experience implementing data security and governance with Microsoft Purview, such as data loss prevention, sensitivity labeling, and insider risk management.
- Experience with role-based Identity and Access Management in a modern cloud environment (Entra ID).
- Experience with Infrastructure as Code (e.g., Bicep, ARM templates).
- Experience supporting services and processes adhering to security frameworks such as NIST CSF.
- Knowledge of defense-in-depth, least-privilege, and secure-by-design principles.
- Understanding of PCI DSS.
- Payments industry exposure is a plus.
- Experience working on Agile/Scrum teams.
Salary Range: $90,000 - $102,000 USD
