AceStack

Role : M365 Admin
Location : North Quincy, MA Chicago, IL (Onsite)
FTE only
Job Description :

• 10+ years of M365 Administration and Secuirty
• Understanding of M365 security architecture and compliance frameworks.
• Administer Exchange Online, Teams, SharePoint, OneDrive, and M365 tenant settings.
• Manage Entra ID (Azure AD) identities, MFA, Conditional Access, and role-based access.
• Configure and support Defender for Office 365, Purview DLP, MCAS, and M365 security features.
• Implement Zero Trust security controls and maintain secure score posture.
• Handle M365 compliance: retention, sensitivity labels, data governance.
• Automate admin tasks via PowerShell and generate platform/security reports.
• Provide L3 support, troubleshoot issues, and collaborate with security teams.

1. Microsoft 365 Administration
• Manage and administer Exchange Online, SharePoint Online, OneDrive, Teams, and Power Platform.
• Configure and support M365 groups, licenses, roles, and service settings.
• Monitor service health, troubleshoot issues, and perform tenant maintenance.
• Manage user and device lifecycle within Entra ID (Azure AD).
2. M365 Security & Compliance
Configure and maintain:
• Defender for Office 365
• Defender for Identity
• Defender for Endpoint (optional depending on Intune scope)
• Microsoft Purview (DLP, sensitivity labels, retention policies)
• Cloud App Security / Defender for Cloud Apps (MCAS)
• Conditional Access Policies
• Implement Zero Trust principles across identity, data, and device access.
• Conduct security monitoring, threat investigation, and remediation.
• Maintain compliance posture and M365 Secure Score improvements.
3. Identity & Access Management (Entra ID)
• Manage identity configuration, authentication policies, and MFA.
• Administer Conditional Access, Privileged Identity Management (PIM), and role-based access controls.
• Support hybrid identity (Entra Connect / Cloud Sync).
4. Intune / Endpoint Management (optional based on org scope)
• Configure MDM/MAM policies.
• Deploy and manage apps, compliance policies, security baselines.
• Ensure secure device posture across Windows/macOS/iOS/Android.
5. Governance & Compliance
• Implement M365 governance policies around:
• SharePoint/Teams provisioning & lifecycle
• External access & guest access management
• Data retention, archival, and legal hold
• Ensure alignment with corporate and regulatory compliance requirements.
6. Automation & Reporting
• Use PowerShell, Graph API, or Power Automate for automation and bulk administration.
• Generate reports on security posture, user activity, license usage, and compliance.
7. Collaboration & Support
• Act as SME for M365 platform and security-related topics.
• Collaborate with cybersecurity, infrastructure, and compliance teams.
• Provide L3 support for M365 and security escalations.
• Educate end-users and business units on best practices.