Microsoft 365 Administrator
PrePass
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
PrePass is seeking a Microsoft 365 Administrator to own day-to-day administration of the Microsoft 365 tenant, including Exchange Online, Teams, Intune, SharePoint, OneDrive, and Entra ID. You will be the resolution owner for complex issues and support the Copilot deployment while upholding security policies in a regulated environment.
The role requires hands-on expertise across the Microsoft 365 stack, with responsibilities spanning identity, access, device management, and compliance controls.
Qualifications
- 3–5+ years administering Microsoft 365 in a production environment (Admin Center, Entra ID, security groups, access policies)
- Hands-on Exchange Online administration — mailboxes, mail flow, message trace, distribution groups
- Hands-on Microsoft Intune administration — device enrollment, compliance policies, configuration profiles, and application deployment across Windows and macOS
- Microsoft Teams administration, including policy and lifecycle management
- SharePoint Online and OneDrive permission administration
- PowerShell scripting and Microsoft Graph for bulk administration, reporting, and auditing
- Working knowledge of sensitivity labels, data loss prevention, and retention policies
- Experience with role-based access control (RBAC)
- Experience owning complex issue resolution in a ticket-based service management platform
- Ability to document technical procedures clearly and communicate status updates effectively
- Experience working with IT leadership, security and compliance teams, and business users across departments
- Eligible to work in the United States
Responsibilities
- Administer Exchange Online mailboxes, shared mailboxes, distribution groups, mail flow rules, and connectors
- Investigate mail delivery issues using message trace and quarantine review
- Operate anti-spam and anti-phishing policy in coordination with the security team
- Manage Exchange Online Archiving and mailbox retention configuration
- Administer Teams policies, team and channel lifecycle, and guest access
- Support Teams Phone, calling plans, and audio conferencing — number assignment, call routing, and dial-in configuration
- Resolve meeting, audio, and peripheral device issues affecting end users
- Manage Windows and macOS device enrollment, compliance policies, and configuration profiles
- Package and deploy applications; maintain the enterprise application catalog
- Operate Windows Autopilot provisioning and support co-managed devices alongside Configuration Manager
- Manage update rings and remediate non-compliant devices
- Administer site collections, permissions, sharing policies, and external sharing controls
- Identify and remediate overly permissive access and permission sprawl
- Support content lifecycle, storage management, and access request workflows
- Execute employee and contractor account lifecycle — provisioning, changes, and deprovisioning — in coordination with HR workflows
- Manage security groups, license assignment, and role-based access
- Maintain conditional access policy and support multifactor authentication operations
- Escalate federation and SSO integration design to the identity platform owner
- Manage Copilot license allocation and revocation through security groups
- Monitor adoption and utilization; identify underutilized licenses for reallocation
- Report usage telemetry and adoption trends to IT leadership on a regular cadence
- Monitor Copilot Studio consumption against tenant capacity and flag cost anomalies
- Verify that Copilot data access aligns with SharePoint permission and sensitivity label configuration
- Support deployment of custom agents, including testing configurations and verifying access controls
- Apply and maintain sensitivity labels, data loss prevention policies, and retention policies
- Support evidence collection for SOC 2 Type II and GovRAMP audit cycles
- Maintain documented administrative procedures and change records
- Monitor acceptable use of approved AI tools and elevate data handling concerns to management
- Act as resolution owner for complex Microsoft 365 issues that require deep platform expertise
- Diagnose and resolve incidents spanning Exchange Online, Teams, SharePoint, OneDrive, and managed endpoints
- Reduce recurring issue volume by identifying root cause and building knowledge content the support team can apply directly
- Partner with the Support Center team to raise first-contact resolution rates on common requests
- Build and maintain PowerShell and Microsoft Graph scripts for bulk operations, license reporting, and permission auditing
- Document configurations, runbooks, and technical procedures to a standard others can follow
Skills
Tools
Job description
PrePass® is North America's most trusted weigh station bypass and toll management platform. We're transforming how the transportation industry operates—creating solutions that keep trucks moving safely, efficiently, and compliantly. This means making bold decisions and building systems that support not only fleets but the broader economy. It all starts with enabling commercial vehicles to keep rolling with seamless toll management, weigh station bypass, and safety solutions. It's what we do best, and we do it to meet the demands of the road every day.
PrePass® is North America's most trusted weigh station bypass and toll management platform. We're transforming how the transportation industry operates—creating solutions that keep trucks moving safely, efficiently, and compliantly. This means making bold decisions and building systems that support not only fleets but the broader economy. It all starts with enabling commercial vehicles to keep rolling with seamless toll management, weigh station bypass, and safety solutions. It's what we do best, and we do it to meet the demands of the road every day.
That's why people join us: our solutions are implemented in real-time, on highways and interstates across the nation, helping fleets go farther, faster. This work challenges and rewards, presenting complex problems that need ambitious answers. We hire bold thinkers with a heart for impact, a passion for progress, and the optimism to shape the future of transportation.
You will own day-to-day administration of the PrePass Microsoft 365 tenant — Exchange Online, Microsoft Teams, Intune-managed endpoints, SharePoint and OneDrive, and Entra ID account lifecycle. You are the resolution owner for complex issues across these platforms and the person our support team turns to when something needs deeper expertise.
This is a hands-on operational role in a regulated environment. PrePass maintains SOC 2 Type II and is pursuing GovRAMP Moderate authorization, so access control, data protection, and documented procedure are part of the work rather than an afterthought.
You will also administer our Microsoft 365 Copilot deployment — license allocation, adoption reporting, and the SharePoint permission hygiene that determines what Copilot can surface to end users. Architectural, vendor, and governance-framework decisions elevate to IT leadership; you execute against established policy, and you surface the risks and opportunities leadership needs to see.
- Administer mailboxes, shared mailboxes, distribution groups, mail flow rules, and connectors
- Investigate mail delivery issues using message trace and quarantine review
- Operate anti-spam and anti-phishing policy in coordination with the security team
- Manage Exchange Online Archiving and mailbox retention configuration
- Administer Teams policies, team and channel lifecycle, and guest access
- Support Teams Phone, calling plans, and audio conferencing — number assignment, call routing, and dial-in configuration
- Resolve meeting, audio, and peripheral device issues affecting end users
- Manage Windows and macOS device enrollment, compliance policies, and configuration profiles
- Package and deploy applications; maintain the enterprise application catalog
- Operate Windows Autopilot provisioning and support co-managed devices alongside Configuration Manager
- Manage update rings and remediate non-compliant devices
- Administer site collections, permissions, sharing policies, and external sharing controls
- Identify and remediate overly permissive access and permission sprawl
- Support content lifecycle, storage management, and access request workflows
- Execute employee and contractor account lifecycle — provisioning, changes, and deprovisioning — in coordination with HR workflows
- Manage security groups, license assignment, and role-based access
- Maintain conditional access policy and support multifactor authentication operations
- Escalate federation and SSO integration design to the identity platform owner
- Manage Copilot license allocation and revocation through security groups
- Monitor adoption and utilization; identify underutilized licenses for reallocation
- Report usage telemetry and adoption trends to IT leadership on a regular cadence
- Monitor Copilot Studio consumption against tenant capacity and flag cost anomalies
- Verify that Copilot data access aligns with SharePoint permission and sensitivity label configuration
- Support deployment of custom agents, including testing configurations and verifying access controls
- Apply and maintain sensitivity labels, data loss prevention policies, and retention policies
- Support evidence collection for SOC 2 Type II and GovRAMP audit cycles
- Maintain documented administrative procedures and change records
- Monitor acceptable use of approved AI tools and elevate data handling concerns to management
- Act as resolution owner for complex Microsoft 365 issues that require deep platform expertise
- Diagnose and resolve incidents spanning Exchange Online, Teams, SharePoint, OneDrive, and managed endpoints
- Reduce recurring issue volume by identifying root cause and building knowledge content the support team can apply directly
- Partner with the Support Center team to raise first-contact resolution rates on common requests
- Build and maintain PowerShell and Microsoft Graph scripts for bulk operations, license reporting, and permission auditing
- Document configurations, runbooks, and technical procedures to a standard others can follow
- 3-5 years administering Microsoft 365 in a production environment (Admin Center, Entra ID, security groups, access policies)
- Hands-on Exchange Online administration — mailboxes, mail flow, message trace, distribution groups
- Hands-on Microsoft Intune administration — device enrollment, compliance policies, configuration profiles, and application deployment across Windows and macOS
- Microsoft Teams administration, including policy and lifecycle management
- SharePoint Online and OneDrive permission administration
- PowerShell scripting and Microsoft Graph for bulk administration, reporting, and auditing
- Working knowledge of sensitivity labels, data loss prevention, and retention policies
- Experience with role-based access control (RBAC)
- Experience owning complex issue resolution in a ticket-based service management platform
- Ability to document technical procedures clearly and communicate status updates effectively
- Experience working with IT leadership, security and compliance teams, and business users across departments
- Eligible to work in the United States
- Relevant certification — MD-102 (Microsoft 365 Certified: Endpoint Administrator Associate) or MS-700 (Teams Administrator Associate)
- AB-900 (Microsoft 365 Certified: Copilot and Agent Administration Fundamentals)
- Microsoft 365 Copilot administration experience — Copilot Control System, Copilot Dashboard, license management
- Copilot Studio agent configuration and access control verification
- Intune and Configuration Manager co-management
- Teams Phone and calling plan administration
- Experience supporting an environment under SOC 2, GovRAMP, FedRAMP, or NIST 800-53
- Microsoft Purview compliance tooling beyond core labeling and DLP
- Privileged Identity Management (PIM) and Microsoft Entra ID P2 features
- Basic understanding of API authentication (OAuth 2.0, REST APIs)
- Robust benefit package that includes medical, dental, and vision that start on date of hire
- Paid Time Off, to include vacation, sick, holidays, and floating holidays
- Paid parental leave
- 401(k) plan with employer match
- Company-funded "lifestyle account" upon date of hire for you to apply toward your physical and mental well-being (i.e., ski passes, retreats, gym memberships)
- Tuition Reimbursement Program
- Voluntary benefits, to include, but not limited to Legal and Pet Discounts
- Employee Assistance Program (available at no cost to you)
- Company-sponsored and funded "Culture Team" that focuses on the Physical, Mental, and Professional well-being of employees
- Community Give-Back initiatives
- Culture that focuses on employee development initiatives
- Company-wide bonus and commission plans
We invest in relationships. We challenge ourselves to innovate and improve. We win together. Simply put, we live our Core Values.
Ready to help move the transportation industry forward? Join us and let's drive progress—together.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
