We seek an experienced Senior M365 & Exchange Engineer with deep expertise in Microsoft 365 services, Exchange Online, Azure Active Directory, and enterprise identity governance. This role focuses on designing, deploying, and managing modern cloud-based productivity, messaging, and identity platforms while ensuring security, stability, and operational excellence across the Microsoft 365 ecosystem.

The ideal candidate will have hands-on experience with Microsoft 365 administration, identity and access management, Exchange Online, and hybrid identity integrations, along with strong knowledge of governance, security, and compliance best practices.

Why Join Us?

• Work in a dynamic, cloud-forward environment, modernizing enterprise identity, email, and collaboration platforms.
• Lead initiatives across Microsoft 365 security, automation, and platform governance.
• Gain hands-on experience with enterprise-scale identity systems, cloud security controls, and Zero Trust implementation.

SPA has an immediate need for an On-site/Hybrid/Remote Senior M365 & Exchange Engineer.

• Design, deploy, and manage Exchange Online environments to ensure secure, reliable, and efficient messaging services.
• Administer mail flow, connectors, transport rules, distribution groups, shared mailboxes, resource accounts, auditing configurations, and retention policies.
• Maintain and optimize Exchange Online Protection (EOP) and Defender for Office 365 to manage threats, filter spam, and ensure message hygiene.
• Perform advanced troubleshooting for email delivery, hybrid mail flow, secure mail routing, and service health issues.
• Support migrations, tenant integrations, and lifecycle-management activities.

• Administer Azure Active Directory (Azure AD) / Entra ID, including users, groups, roles, conditional access, and identity governance.
• Manage authentication and access controls, including Conditional Access, MFA, SSO, and passwordless capabilities.
• Support hybrid identity solutions such as Azure AD Connect / Entra Connect, federation services, pass-through authentication, MFA/SSO integrations, and synchronization technologies.
• Implement and enforce RBAC, least privilege, privileged identity management (PIM), and identity security best practices.
• Manage enterprise application integrations, app registrations, service principals, OAuth permissions, and SaaS identity lifecycle.

• Manage and support Office 365 services, including SharePoint Online, OneDrive for Business, Microsoft Teams, and compliance tools.
• Apply and maintain governance models, including DLP policies, retention policies, information protection labels, and data security controls.
• Monitor and improve tenant posture using Microsoft Secure Score, audit logs, and compliance center insights.
• Support cross-platform integrations across Microsoft 365 workloads to ensure a consistent, secure user experience.

• Ensure compliance with frameworks such as, NIST SP 800-171, CMMC, and ISO 27001 as they apply to Microsoft 365 and identity environments.
• Support Microsoft Purview, retention policies, information protection labels, and data protection initiatives.
• Implement cloud security hardening, conditional access baselines, authentication protections, and auditing policies.
• Contribute to security assessments, audits, incident response processes, and remediation activities.

• Monitor service health and performance across Microsoft 365 and Azure AD using built-in and enterprise monitoring tools.
• Conduct root cause analysis for identity, messaging, and authentication issues impacting user experience and system availability.
• Develop automation and alerting using PowerShell, Microsoft Graph API, or Azure automation tools to enhance operational efficiency.

• Partner with infrastructure, endpoint, networking, cybersecurity, and application teams to deliver integrated solutions.
• Provide Tier III support and mentor junior administrators and support personnel.
• Engage with vendors and managed service providers to resolve issues and implement enhancements.
• Document configurations, operational procedures, governance policies, and architectural decisions for knowledge sharing.

Required Qualifications

Education:

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience.

Experience:

• 8+ years of system administration experience with Microsoft technologies.
• 5+ years administering Microsoft 365, Exchange Online, and Azure AD.
• Experience with hybrid identity, authentication services, and cloud security.

Technical Skills:

• Strong expertise in Exchange Online, Azure AD, and Microsoft 365 administration.
• Hands-on experience with identity governance, conditional access, MFA/SSO, and app registration.
• Strong scripting skills using PowerShell, Azure CLI, or Graph API.

Soft Skills:

• Strong troubleshooting and analytical skills.
• Excellent communication and cross-functional collaboration abilities.
• Ability to document technical solutions, governance, and best practices.

Preferred Qualifications

• Knowledge of NIST SP 800-53, NIST SP 800-171, CMMC, FedRAMP, or similar cybersecurity frameworks.
• Experience supporting Microsoft 365 GCC, GCC High, or other regulated environments.
• Familiarity with Microsoft Purview, Intune, Defender, and Zero Trust architectures.
• Experience with Exchange hybrid deployments and Entra Connect.
• Experience with automation tools, identity lifecycle workflows, or multi-cloud identity.
• Relevant Microsoft certifications, such as:
• Microsoft 365 Certified: Messaging Administrator Associate (MS-203)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft 365 Certified: Administrator Expert

Desired Attributes

• Strong analytical and problem-solving skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Commitment to operational excellence and continuous improvement.
• Collaborative approach with both technical and non-technical stakeholders.
• Focus on delivering secure, reliable, and scalable services that enable the mission and enhance the user experience.