Deputy Manager - Senior Microsoft 365 & Cloud Administrator INFOTECH Corporate Office|Corp. Office, Ahmedabad, Gujarat, India 8 - 12 Years
Job Description
Job Description: Senior Microsoft 365 & CloudAdministrator
Role: Senior Microsoft 365 (Office 365) & CloudAdministrator
Team: IT Infrastructure / Cloud Operations
Experience: 8–12 years total, with at least 5 years administeringMicrosoft 365 at enterprise scale and at least 3 years administering Azure (AWSexposure a plus)
Employment Type: Full-time
Role Summary
We are looking for a Senior Microsoft 365 & CloudAdministrator to manage, secure, and optimize our Microsoft 365 collaborationplatform and cloud infrastructure. You will be responsible for the day-to-dayadministration, security, compliance, and continuous improvement of ExchangeOnline, SharePoint, Teams, OneDrive, Entra ID, Intune, Purview, and Defender,along with Azure cloud resources supporting enterprise and businessapplications.
The role combines hands-on administration with seniorownership: designing policies, leading migrations and rollouts, handlingescalations, automating operations, and ensuring the environment meetssecurity, data protection, and regulatory requirements expected in a pharmaorganization.
Key Responsibilities
1. Microsoft 365 Administration
- Administerand maintain the Microsoft 365 tenant, including tenant settings, servicehealth, message center changes, and licensing.
- ExchangeOnline: mailbox and shared mailbox management, distribution and M365groups, mail flow and transport rules, connectors, retention, journaling,and hybrid Exchange where applicable.
- SharePointOnline and OneDrive: site architecture, permissions, sharing policies,storage management, site lifecycle, and governance.
- MicrosoftTeams: Teams governance, policies, meeting and calling settings, TeamsPhone/Direct Routing (if applicable), guest and external access, andlifecycle management.
- ManageMicrosoft 365 Apps deployment, update channels, and add-ins.
- AdministerPower Platform environments (Power Apps, Power Automate, Power BI)including DLP policies and environment governance.
- GovernMicrosoft 365 Copilot and AI features: license assignment, dataaccess readiness, oversharing remediation, sensitivity labels, and usagepolicies.
- Planand execute tenant migrations, mailbox and file migrations, andtenant-to-tenant consolidations.
2. Identity and Access Management
- AdministerMicrosoft Entra ID (Azure AD): users, groups, dynamic groups, guestaccounts, app registrations, and enterprise applications.
- Managehybrid identity with Entra Connect / Cloud Sync and on-premises ActiveDirectory.
- Configureand maintain Conditional Access, MFA, passwordless authentication,SSPR, and risk-based policies.
- ImplementPrivileged Identity Management (PIM), role‑based access, accessreviews, and identity governance (joiner‑mover‑leaver processes).
- IntegrateSaaS and enterprise applications through SSO (SAML, OIDC) and SCIMprovisioning.
3. Endpoint and Device Management
- Managedevices through Microsoft Intune: enrollment (Autopilot),compliance policies, configuration profiles, application deployment, andpatching.
- Managemobile devices and app protection policies (MAM) for BYOD and corporatedevices.
- Coordinatewith endpoint and security teams on Windows Update for Business and devicehardening baselines.
4. Security and Threat Protection
- Monitorand improve Microsoft Secure Score and Identity Secure Score.
- Investigateand respond to security incidents such as phishing, compromised accounts,and suspicious sign‑ins, in coordination with the SOC.
- Configureemail authentication (SPF, DKIM, DMARC) and protect against spoofing and impersonation.
- IntegrateM365 and Azure logs with SIEM platforms (e.g., Microsoft Sentinel,Splunk).
5. Compliance, Data Protection and Governance
- AdministerMicrosoft Purview: sensitivity labels, DLP policies, retentionpolicies and labels, records management, eDiscovery, audit logs, insiderrisk, and information barriers where required.
- Alignretention and records management with the company's record retentionpolicy and legal hold requirements.
- SupportGxP-relevant collaboration use cases (e.g., controlled document storage,audit trails, and access control on regulated SharePoint sites) inalignment with 21 CFR Part 11, EU Annex 11, and ALCOA+ whereapplicable, working with QA and CSV teams.
- Supportdata privacy compliance (GDPR, India DPDP Act) and internal or externalaudits.
- MaintainM365 backup and recovery solutions (e.g., Microsoft 365 Backup, Veeam,AvePoint, Druva).
6. Cloud Administration (Azure and Multi-Cloud)
- AdministerAzure subscriptions and resources, including VMs, storage accounts,virtual networks, NSGs, load balancers, App Services, Azure SQL, KeyVault, and backup.
- Manageresource organization through management groups, subscriptions, resourcegroups, tagging, and Azure Policy.
- Implementand maintain RBAC, managed identities, and secure access to cloudresources.
- Monitorperformance, availability, and health using Azure Monitor, Log Analytics,and alerts.
- Managebackup, Azure Site Recovery, and disaster recovery testing for cloudworkloads.
- Supporthybrid connectivity (VPN, ExpressRoute) and integration with on-premisesinfrastructure.
- Trackand optimize cloud costs through Azure Cost Management, rightsizing,reservations, and cleanup of unused resources.
- SupportAWS or other cloud environments where required.
7. Automation and Operations
- Automateadministration tasks using PowerShell, Microsoft Graph API, Azure CLI,and Azure Automation / Logic Apps.
- Useinfrastructure-as-code (Bicep, ARM, or Terraform) for repeatable clouddeployments where applicable.
- Maintainstandard operating procedures, runbooks, configuration documentation, andchange records.
- HandleL2/L3 escalations, lead root cause analysis, and drive problem resolution.
- FollowITIL processes for incident, change, problem, and service requestmanagement.
- MonitorMicrosoft roadmap and service changes and plan their impact and rollout.
8. Leadership and Collaboration
- Mentorjunior administrators and service desk teams; create knowledge articlesand training.
- Workwith security, network, application, QA, and business teams on projectsand requirements.
- ManageMicrosoft partners and vendors for support cases, licensing, and projects.
- Driveuser adoption and awareness of collaboration tools and security bestpractices.
Required Skills and Experience
- Deep,hands‑on experience administering Microsoft 365: Exchange Online,SharePoint Online, OneDrive, Teams, and the M365 admin center.
- Strongexpertise in Entra ID, Conditional Access, MFA, PIM, and hybrididentity with Active Directory.
- Hands‑onexperience with Intune and Autopilot.
- Practicalexperience with Microsoft Defender and Microsoft Purview.
- SolidAzure administration experience: compute, storage, networking,RBAC, policy, monitoring, and backup.
- StrongPowerShell scripting and familiarity with Microsoft Graph.
- Experiencewith M365 licensing (E3/E5, add-ons) and license optimization.
- Experiencein migrations, tenant governance, and large user environments (severalthousand users).
- Understandingof ITIL processes and change management.
- Exposureto regulated environments; pharma or life sciences experience is a strongadvantage.
Preferred Qualifications
- Bachelor'sdegree in Computer Science, Information Technology, or a related field.
- Microsoftcertifications such as MS-102 (Microsoft 365 Administrator Expert),AZ-104 (Azure Administrator), SC-300 (Identity and Access Administrator),SC-400/SC-401 (Information Protection), MD-102 (Endpoint Administrator),or AZ-305 (Azure Solutions Architect).
- Exposureto AWS administration and multi-cloud environments.
- Experiencewith Microsoft 365 Copilot deployment and governance.
At Zydus Lifesciences, w e nurture a culture of innovation, excellence, and inclusivity , driving meaningful advancement in the pharmaceutical and healthcare industries. Fueled by creativity , we constantly exploring new ways to improve patient care and expand healthcare accessibility.
Our commitment to a positive and empowering work environment has earned us recognition as one of India's Best Workplaces in Biotechnology & Pharmaceuticals.