Azure Landing Zone and M365 Platform Engineering Lead

Torrey Holistics; Cranberry Township (Butler County); Hybrid; USD 117,000 - 146,000; Full time

Job summary

Torrey Holistics is seeking an Azure Landing Zone and M365 Platform Engineering Lead to translate high-level architecture into reliable engineering. You will mentor a focused team and harden governance across Azure, Entra ID, and Microsoft 365.

In the first 90 days, you will assess subscriptions and landing zones, implement automation patterns, and formalize governance guardrails while advancing hybrid identity reliability and licensing enablement.

Qualifications

• BS in Computer Science, Information Systems, Engineering, or related field, or equivalent experience.
• 4+ years in Azure, Entra ID, or enterprise cloud identity engineering.
• 1–2+ years leading or supervising technical teams.
• Strong cloud governance and automation experience.
• Advanced Azure platform engineering and governance knowledge.
• Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication frameworks.
• Skilled with PowerShell, Microsoft Graph API, and cloud automation tools.

Responsibilities

• Lead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence.
• Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring; tune cost, security, and performance.
• Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.
• Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.
• Operationalize compliance—meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.
• Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.

Skills

Leadership

Automation

Governance

Hybrid identity

Education

Bachelor's Degree in Computer Science or related field

Tools

Azure

Entra ID

Microsoft Graph API

PowerShell

Job description

The missionBuild and steward a secure, scalable Microsoft cloud platform that our global teams can trust every day. As our Azure Landing Zone and M365 Platform Engineering Lead, you’ll convert high-level architecture into reliable engineering, mentor a focused team, and harden governance across Azure, Entra ID, and Microsoft 365.Your first 90 daysDays 1–30: Assess current Azure subscriptions, landing zone structures, RBAC, and policy frameworks; inventory Entra ID Conditional Access and authentication flows; review M365 tenant baselines and licensing enablement; align with the M365/Azure Principal Architect on priorities.Days 31–60: Implement standard automation patterns (PowerShell, Graph API, Functions, Logic Apps); uplift monitoring and alerting; document runbooks and operating procedures; close quick-win cost, performance, and security gaps.Days 61–90: Formalize governance guardrails across Azure, M365 administration, and Entra ID; advance hybrid identity reliability (sync and federation); launch a roadmap for identity modernization and operational excellence.Core responsibilitiesLead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence; champion accountability and continuous improvement.Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring; tune cost, security, and performance; align with enterprise architecture and cloud strategy.Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.Operationalize compliance—meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.Work setupLocation: Cranberry Township, PASchedule: Hybrid—3 days in office, 2 days remoteReports to: Sr. Manager – User Experience & CollaborationQualificationsBS in Computer Science, Information Systems, Engineering, or related field—or equivalent experience.4+ years in Azure, Entra ID, or enterprise cloud identity engineering.1–2+ years leading or supervising technical teams.Strong cloud governance and automation experience.Advanced Azure platform engineering and governance knowledge.Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication frameworks.Skilled with PowerShell, Microsoft Graph API, and cloud automation tools.CompensationFor pay transparency: the estimated base salary range is $116,800 to $146,000 annually, based on experience, qualifications, and skills. We are committed to equity and transparency in our people practices.Education noteProficiency: Bachelor’s Degree.