Position Summary
The Senior Client Platform Engineer (M365) is a senior technical engineer responsible for the support, analysis, documentation, and operational governance of Microsoft 365 cloud services and Windows and Apple endpoint management. Operational governance includes configuration and security baselines, patch compliance, and platform standards.
The role partners with Information Security Operations, Identity and Access Management, and IT Business Operations support teams to keep the workplace platform secure, compliant, and reliable in a regulated healthcare and life sciences environment. The role serves as a senior escalation point and provides technical guidance to Client Platform Engineers.
Job Responsibilities
Microsoft 365 Cloud Services and Hybrid Identity
- Administer and support Microsoft 365 cloud services, including SharePoint, Exchange, Entra, Intune, Autopilot, Teams, Copilot, and Azure, as a senior administrator for the platform.
- Hold Microsoft 365 administrative roles assigned on a least-privilege basis, and follow company policy for privileged access, change approval, and separation of duties.
- Support the hybrid identity environment, Microsoft Entra Connect sync, and partner with Windows Hosting team in support of legacy Active Directory
Windows and Apple Endpoint Management
- Support Windows and Apple endpoints using platform mobile device management tools Intune, Autopilot, Apple Business Manager, and Jamf.
- Support AWS WorkSpaces for virtual desktops.
- Support zero-touch endpoint hardware deployment in collaboration with hardware OEM and VAR partners and manage those vendor relationships.
- Maintain the test environment used to certify new desktop provisioning and software deployment packages before release.
Automation, Patching, and Platform Standards
- Use PowerShell and Terraform to automate and standardize the support, maintenance, and implementation of endpoints.
- Manage patches and upgrades for endpoints, Microsoft 365 applications, and third-party applications using Intune, Jamf, Automox, and Absolute, including Microsoft Update Rings.
- Apply and monitor CIS benchmarks for endpoint operating systems and Microsoft 365 applications, and remediate gaps in partnership with Information Security Operations.
Partnership, Escalation, and Technical Guidance
- Serve as liaison to Information Security Operations and Identity and Access Management teams.
- Serve as the senior (tier 3) technical escalation point for support teams directly responsible for IT Business Operations.
- Participate in large projects requiring analysis and architecture skills, and contribute technical design input in partnership with architects.
- Write and maintain technical documentation and change records sufficient to support audit and compliance requirements.
- Provide technical guidance to Client Platform Engineers.
- Evaluate emerging Microsoft 365, endpoint, and AI capabilities and recommend adoption where appropriate.
Required Qualifications
- Bachelor's degree in computer science, information technology, or a related field, or equivalent practical experience.
- Minimum of 5 years of IT platform engineering experience in a fast-paced, growing organization with 1000+ users, including at least 3 years supporting Microsoft 365 in a hybrid environment.
Preferred Qualifications
- Extensive knowledge providing support, analysis, and governance in an environment with a mix of Windows and Apple endpoints.
- Extensive knowledge of Microsoft Intune Update Rings.
- Extensive knowledge of PowerShell.
- Experience working with and managing vendor relationships.
- Microsoft certification such as Microsoft 365 Certified: Administrator Expert or Microsoft 365 Certified: Endpoint Administrator Associate.
- Experience using Terraform to manage endpoints.
- Experience with Jamf, Apple Business Manager, Automox, and Absolute.
- Experience applying CIS benchmarks to endpoint operating systems and Microsoft 365 applications.
- Experience supporting AWS WorkSpaces.
- Experience working in a healthcare, life sciences, or other regulated environment.
Physical Demands
- Work is primarily performed at a computer. Occasional handling of computer equipment and peripherals may be required.
Training
- All job specific, safety, and compliance training are assigned based on the job functions associated with this employee.
Other
- Requires periodic travel.
- Requires occasional work outside typical business hours to perform duties in the least impactful timeframes.
- Requires availability for on-call responsibilities several days per month.
Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.
This job description reflects management’s assignment of essential functions. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.
