Microsoft 365 Administrator - Secure, Compliant Cloud

PrePass; Phoenix (AZ); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical Benefits

Dental Benefits

Vision Benefits

PTO

401(k) match

Tuition Reimbursement

Culture Team

Job summary

PrePass is seeking a Microsoft 365 Administrator to own day-to-day administration of the Microsoft 365 tenant, including Exchange Online, Teams, Intune, SharePoint, OneDrive, and Entra ID. You will be the resolution owner for complex issues and support the Copilot deployment while upholding security policies in a regulated environment.

The role requires hands-on expertise across the Microsoft 365 stack, with responsibilities spanning identity, access, device management, and compliance controls.

Qualifications

• 3–5+ years administering Microsoft 365 in a production environment (Admin Center, Entra ID, security groups, access policies)
• Hands-on Exchange Online administration — mailboxes, mail flow, message trace, distribution groups
• Hands-on Microsoft Intune administration — device enrollment, compliance policies, configuration profiles, and application deployment across Windows and macOS
• Microsoft Teams administration, including policy and lifecycle management
• SharePoint Online and OneDrive permission administration
• PowerShell scripting and Microsoft Graph for bulk administration, reporting, and auditing
• Working knowledge of sensitivity labels, data loss prevention, and retention policies
• Experience with role-based access control (RBAC)
• Experience owning complex issue resolution in a ticket-based service management platform
• Ability to document technical procedures clearly and communicate status updates effectively
• Experience working with IT leadership, security and compliance teams, and business users across departments
• Eligible to work in the United States

Responsibilities

• Administer Exchange Online mailboxes, shared mailboxes, distribution groups, mail flow rules, and connectors
• Investigate mail delivery issues using message trace and quarantine review
• Operate anti-spam and anti-phishing policy in coordination with the security team
• Manage Exchange Online Archiving and mailbox retention configuration
• Administer Teams policies, team and channel lifecycle, and guest access
• Support Teams Phone, calling plans, and audio conferencing — number assignment, call routing, and dial-in configuration
• Resolve meeting, audio, and peripheral device issues affecting end users
• Manage Windows and macOS device enrollment, compliance policies, and configuration profiles
• Package and deploy applications; maintain the enterprise application catalog
• Operate Windows Autopilot provisioning and support co-managed devices alongside Configuration Manager
• Manage update rings and remediate non-compliant devices
• Administer site collections, permissions, sharing policies, and external sharing controls
• Identify and remediate overly permissive access and permission sprawl
• Support content lifecycle, storage management, and access request workflows
• Execute employee and contractor account lifecycle — provisioning, changes, and deprovisioning — in coordination with HR workflows
• Manage security groups, license assignment, and role-based access
• Maintain conditional access policy and support multifactor authentication operations
• Escalate federation and SSO integration design to the identity platform owner
• Manage Copilot license allocation and revocation through security groups
• Monitor adoption and utilization; identify underutilized licenses for reallocation
• Report usage telemetry and adoption trends to IT leadership on a regular cadence
• Monitor Copilot Studio consumption against tenant capacity and flag cost anomalies
• Verify that Copilot data access aligns with SharePoint permission and sensitivity label configuration
• Support deployment of custom agents, including testing configurations and verifying access controls
• Apply and maintain sensitivity labels, data loss prevention policies, and retention policies
• Support evidence collection for SOC 2 Type II and GovRAMP audit cycles
• Maintain documented administrative procedures and change records
• Monitor acceptable use of approved AI tools and elevate data handling concerns to management
• Act as resolution owner for complex Microsoft 365 issues that require deep platform expertise
• Diagnose and resolve incidents spanning Exchange Online, Teams, SharePoint, OneDrive, and managed endpoints
• Reduce recurring issue volume by identifying root cause and building knowledge content the support team can apply directly
• Partner with the Support Center team to raise first-contact resolution rates on common requests
• Build and maintain PowerShell and Microsoft Graph scripts for bulk operations, license reporting, and permission auditing
• Document configurations, runbooks, and technical procedures to a standard others can follow

Skills

Microsoft 365 Administration

Exchange Online

Intune

Teams administration

SharePoint Online

OneDrive administration

PowerShell scripting

Microsoft Graph

RBAC & IAM

Security policies & DLP

SOC 2 / GovRAMP knowledge

Tools

PowerShell

Microsoft Graph

Entra ID

Azure AD

SharePoint Admin Center

Job description

PrePass is seeking a Microsoft 365 Administrator to own day-to-day administration of the Microsoft 365 tenant, including Exchange Online, Teams, Intune, SharePoint, OneDrive, and Entra ID. You will be the resolution owner for complex issues and support the Copilot deployment while upholding security policies in a regulated environment.

The role requires hands-on expertise across the Microsoft 365 stack, with responsibilities spanning identity, access, device management, and compliance controls.