Azure Landing Zone and M365 Platform Engineering Lead

Westinghouse Electric - USA; Cranberry Township (Butler County); Hybrid; USD 117,000 - 146,000; Full time

Job summary

Westinghouse Electric - USA seeks an Azure Landing Zone and M365 Platform Engineering Lead to translate high‑level architecture into reliable engineering across Azure, Entra ID, and Microsoft 365. You will mentor a focused team, govern cloud identity, and drive security, governance, and cost optimization.

The role requires 4+ years in Azure/Entra ID, strong automation skills with PowerShell and Graph API, and proven leadership experience. Hybrid work schedule available in Cranberry Township, PA.

Qualifications

• BS in Computer Science or related field, or equivalent experience.
• 4+ years in Azure, Entra ID, or enterprise cloud identity engineering.
• 1–2+ years leading or supervising technical teams.
• Strong cloud governance and automation experience.
• Advanced Azure platform engineering and governance knowledge.
• Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication.
• Proficient with PowerShell and Microsoft Graph API.

Responsibilities

• Lead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence.
• Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring.
• Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.
• Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.
• Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.
• Meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.

Skills

Azure

Entra ID

Automation

Leadership

Education

Bachelor’s Degree in Computer Science or related field

Tools

PowerShell

Microsoft Graph API

Job description

The missionBuild and steward a secure, scalable Microsoft cloud platform that our global teams can trust every day. As our Azure Landing Zone and M365 Platform Engineering Lead, you’ll convert high-level architecture into reliable engineering, mentor a focused team, and harden governance across Azure, Entra ID, and Microsoft 365.Your first 90 daysDays 1–30: Assess current Azure subscriptions, landing zone structures, RBAC, and policy frameworks; inventory Entra ID Conditional Access and authentication flows; review M365 tenant baselines and licensing enablement; align with the M365/Azure Principal Architect on priorities.Days 31–60: Implement standard automation patterns (PowerShell, Graph API, Functions, Logic Apps); uplift monitoring and alerting; document runbooks and operating procedures; close quick-win cost, performance, and security gaps.Days 61–90: Formalize governance guardrails across Azure, M365 administration, and Entra ID; advance hybrid identity reliability (sync and federation); launch a roadmap for identity modernization and operational excellence.Core responsibilitiesLead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence; champion accountability and continuous improvement.Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring; tune cost, security, and performance; align with enterprise architecture and cloud strategy.Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.Operationalize compliance—meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.Work setupLocation: Cranberry Township, PASchedule: Hybrid—3 days in office, 2 days remoteReports to: Sr. Manager – User Experience & CollaborationQualificationsBS in Computer Science, Information Systems, Engineering, or related field—or equivalent experience.4+ years in Azure, Entra ID, or enterprise cloud identity engineering.1–2+ years leading or supervising technical teams.Strong cloud governance and automation experience.Advanced Azure platform engineering and governance knowledge.Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication frameworks.Skilled with PowerShell, Microsoft Graph API, and cloud automation tools.CompensationFor pay transparency: the estimated base salary range is $116,800 to $146,000 annually, based on experience, qualifications, and skills. We are committed to equity and transparency in our people practices.Education noteProficiency: Bachelor’s Degree.