M365 Engineer - Exchange

Akkodis; Charlotte (NC); Hybrid; USD 120,000 - 125,000; Full time

Benefits offered by this job

401(k) with match

Job summary

Akkodis is seeking a M365 Engineer in Charlotte, NC (Hybrid) to own and optimize Microsoft Entra ID and hybrid identity landscapes. You will manage user lifecycle, authentication methods, and directory services while coordinating with security teams to ensure compliant access across on-prem and cloud environments.

The role requires strong SSO expertise (SAML, OAuth, OIDC), MFA, conditional access, and automation through PowerShell and Graph API. Salary is $120k–$125k per year with benefits.

Qualifications

• Strong Microsoft 365 administration and Entra ID experience.
• Deep knowledge of SSO, MFA, and federation technologies.
• Experience with Enterprise Applications, App Registrations, and API permissions.
• Exposure to PKI, certificate lifecycle management, and certificate-based authentication.
• Proficiency in PowerShell and Graph API for automation.
• Experience in hybrid identity and AD/Azure integration.

Responsibilities

• Administrate and own Microsoft Entra ID environment and hybrid identity.
• Configure and troubleshoot SSO integrations (SAML 2.0, OAuth 2.0, OIDC).
• Manage MFA and conditional access aligned with security requirements.
• Administer Enterprise Applications, app registrations, and API permissions.
• Maintain AD, GPOs, DNS/DHCP, and Entra Connect synchronization.
• Collaborate with security, infrastructure, and application teams.

Skills

M365 administration

Entra ID

Active Directory

SSO

OAuth 2.0

SAML 2.0

OIDC

MFA

PowerShell

Microsoft Graph API

Azure AD Connect

PKI

Identity governance

Disaster recovery planning

Documentation

Tools

PowerShell

Microsoft Graph API

Intune

Azure AD Connect

OpenID Connect

Job description

Akkodis is seeking a M365 Engineer role is a Full-Time with a client located in Charlotte, NC-(Hybrid). Ideally looking for applicants to have a solid background in M365, Microsoft Entra ID, Active Directory, OAuth 2.0/Single Sign-On (SSO). This individual will be responsible for developing new business opportunities, strengthening existing customer relationships, and achieving territory revenue targets,would come as a big plus.

Salary Range: $120k-$125k/Annum + Benefits, The salary may be negotiable based on experience, education, geographic location, and other factors.

Responsibilities

• Serve as the primary administrator and technical owner of the Microsoft Entra ID environment.
• Administer and maintain user lifecycle management, identity governance, authentication methods, and directory services.
• Design, implement, and maintain enterprise identity and access management solutions.
• Configure, support, and troubleshoot Single Sign-On (SSO) integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other modern authentication protocols.
• Administer Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra.
• Manage and optimize Multifactor Authentication (MFA) solutions, including Microsoft Authenticator, authentication strengths, password less authentication, and self-service password reset capabilities.
• Develop and maintain Conditional Access policies aligned with security, compliance, and business requirements.
• Monitor identity-related health, security posture, and access trends while proactively identifying opportunities for improvement and optimization.
• Partner with application owners, cybersecurity teams, and vendors to integrate applications securely with Microsoft Entra ID.
• Maintain and troubleshoot hybrid identity solutions including Entra Connect and Active Directory synchronization services
• Administer and maintain Active Directory infrastructure, including users, groups, organizational units (OUs), delegation models, and directory services.
• Design, implement, and troubleshoot Group Policy Objects (GPOs) to support security, compliance, and operational requirements.
• Manage and maintain hybrid identity infrastructure supporting synchronization between Active Directory and Microsoft Entra ID.
• Administer and troubleshoot Microsoft Entra Connect, synchronization services, identity provisioning, and directory-related issues.
• Manage and maintain DNS and DHCP services supporting enterprise authentication and application connectivity.
• Perform certificate lifecycle management activities, including certificate renewals, replacements, and troubleshooting for authentication, federation, and secure communications.
• Support Public Key Infrastructure (PKI) and certificate-based authentication solutions where applicable.
• Assist with identity-related disaster recovery planning, testing, and operational readiness activities.
• Collaborate with infrastructure, cybersecurity, and application teams to ensure secure and reliable identity services across on-premises and cloud environments.
• Monitor and maintain the health, availability, and performance of identity-related infrastructure components.

Qualifications

• Strong expertise in Microsoft 365 administration, Microsoft Entra ID, hybrid identity, and directory services.
• Deep understanding of authentication and federation technologies including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Single Sign-On (SSO), and Multifactor Authentication (MFA).
• Experience administering and troubleshooting Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra
• Strong understanding of Conditional Access, authentication methods, identity governance, and modern identity security practices.
• Advanced knowledge of Active Directory, Group Policy, DNS, DHCP, Microsoft Entra Connect, and hybrid identity architectures.
• Experience managing and troubleshooting identity synchronization between Active Directory and Microsoft Entra ID.
• Knowledge of Public Key Infrastructure (PKI), certificate lifecycle management, and certificate-based authentication services.
• Proficiency with PowerShell automation and Microsoft Graph API administration.
• Knowledge of disaster recovery planning, testing, and validation methodologies, with willingness to participate in recovery exercises when required.
• Experience supporting Microsoft Intune, endpoint management, and device-based access controls is a plus.
• Familiarity with AWS identity integrations, IAM, and Amazon Route 53 DNS administration is preferred.
• Must be comfortable working within a strict and highly governed change management environment.
• Must be committed to maintaining security, risk, and compliance controls within a regulated industry environment.
• Ability to create and maintain technical documentation, operational procedures, and knowledge transfer materials.
• Demonstrated ability to troubleshoot complex technical issues, take ownership of problems, and drive resolutions through completion.
• Excellent communication, analytical, and problem-solving skills.

Equal Opportunity Employer/Veterans/Disabled

Benefits offerings include but are not limited to:

• 401(k) with match

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers