Microsoft 365 Solutions Expert

ORNL Federal Credit Union; Oak Ridge (TN); Hybrid; USD 110,000 - 150,000; Full time

Job summary

ORNL Federal Credit Union in Oak Ridge, TN seeks a Microsoft 365 Solutions Expert to design, implement, secure, and optimize Microsoft 365 services across Exchange Online, SharePoint Online, OneDrive, Teams, and Power Platform. This role ensures tools are configured to support member service, regulatory compliance, and operational efficiency.

The position partners with Information Systems, Information Security, and business units to govern adoption, manage Entra ID, and uphold data protection.

Qualifications

• Minimum 5 years hands-on experience administering and engineering Microsoft 365 in a mid-to-large organization.
• Strong expertise in Exchange Online, SharePoint Online, OneDrive, Teams, and Entra ID/Azure AD.
• Experience with Microsoft 365 security and compliance features (DLP, retention, eDiscovery, auditing).
• Experience designing and supporting Power Platform solutions; Power BI a plus.
• Familiarity with hybrid environments and migration approaches to Microsoft 365.
• Bachelor's degree in information systems/cybersecurity or related field; relevant MS certifications preferred.
• Excellent communication, documentation, and training skills.

Responsibilities

• Microsoft 365 Administration & Architecture for Exchange Online, SharePoint Online, OneDrive, Teams, and Power Platform.
• Design secure configurations aligned with regulatory requirements and internal policies.
• Manage Entra ID / Azure AD, conditional access, MFA, and RBAC.
• Develop governance standards for provisioning, data classification, and lifecycle management.
• Lead security/compliance features like Purview, Defender for Office 365, and insider risk controls.
• Plan and support migrations to Microsoft 365 and modernize platforms.
• Collaborate with IS, InfoSec, and business units; provide training and adoption materials.
• Maintain documentation, runbooks, and incident response support; participate in on-call rotations.

Skills

Microsoft 365 Administration

Architecture

Identity & Access Management

Security & Compliance

Power Platform (Power Automate, Power

Power Apps

Power BI

Migration Planning

Hybrid/On-premises Environments

Education

Bachelor's degree in Information Systems, CS, or Cybersecurity

Tools

Azure AD / Entra ID

Microsoft 365 Admin Center

Microsoft Purview / Defender

Job description

Description

This role requires full-time onsite presence in Oak Ridge, TN, during the first 90 days. After that, there is potential for a hybrid schedule, with a required onsite presence of three days per week.

The Microsoft 365 Solutions Expert is responsible for designing, implementing, securing, and optimizing Microsoft 365 services to support the digital workplace and collaboration needs of ORNL Federal Credit Union. This role ensures that Microsoft 365 tools including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Power Platform, and related security/compliance features are configured to support member service, operational efficiency, and regulatory compliance (e.g., NCUA, GLBA, FFIEC, NIST).

Working closely with Information Systems, Information Security, and Business Unit stakeholders, the Microsoft 365 Solutions Expert translates business requirements into secure, scalable, and user-friendly solutions. This position leads the governance, standardization, and adoption of Microsoft 365 capabilities while maintaining strong controls over data protection, access, and lifecycle management in line with the credit union's risk and compliance objectives.

Essential Functions & Responsibilities:

• Microsoft 365 Administration & Architecture: Serves as the subject matter expert (SME) and primary administrator for Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Power Platform (Power Automate, Power Apps, Power BI), and related services. Designs and implements secure Microsoft 365 solutions and configurations that align with regulatory requirements and internal security policies (e.g., DLP, retention, eDiscovery, information governance). Manages Microsoft 365 tenant configuration, licensing, capacity, updates, and feature rollouts, ensuring changes are tested, documented, and communicated before deployment. Monitors the health, performance, and usage of Microsoft 365 services; proactively identify issues and optimization opportunities using built-in and third‑party monitoring tools.
• Identity & Access Management: Configures and maintains Microsoft Entra ID (Azure AD) for identity and access management, including conditional access, MFA, security groups, and role‑based access controls (RBAC).
• Security, Governance & Compliance: Develops and enforces governance standards for Microsoft 365, including naming conventions, site and team provisioning, data classification, sharing policies, and lifecycle management. Partners with Information Security to implement and support security and compliance features such as Microsoft Purview, Defender for Office 365, Safe Links/Safe Attachments, and insider risk controls.

Migration & Platform Modernization: Plans, manages, and supports the migration of email, files, and collaboration workloads into Microsoft 365 from legacy systems or other platforms.

• Business Solutions & Process Improvement: Works with business units to identify process improvement opportunities and design solutions using Microsoft 365 tools (e.g., Teams, SharePoint, Power Automate workflows, and Power Apps).
• Documentation & Knowledge Management: Creates and maintains technical documentation, including architecture diagrams, configuration baselines, standard operating procedures, and administration guides.
• Support & Incident Management: Provides Tier 3 support for complex Microsoft 365 incidents and service requests; perform root cause analysis and implement permanent fixes or process improvements. Participates in on‑call rotations and supports after‑hours or weekend work as needed for planned changes, incident response, and critical project work.
• Training & User Adoption: Develops and delivers training, best‑practice guidance, and adoption materials for staff and leaders to effectively use Microsoft 365 tools in their daily work.
• Business Continuity & Disaster Recovery: Supports business continuity and disaster recovery efforts as they relate to Microsoft 365, including backup strategies, recovery testing, and resiliency planning.
• Vendor & Partner Collaboration: Collaborates with vendors, consultants, and Microsoft support on escalated issues, roadmap planning, and solution design.
• Roadmap Awareness & Strategic Alignment: Stays current with the Microsoft 365 roadmap, features, and licensing changes; evaluates new capabilities and provides recommendations on adoption aligned with credit union priorities.
• Performs other job‑related duties as assigned.

Hybrid Remote Statement: Following initial onboarding and training, this position may transition to a hybrid remote work arrangement, allowing performance of job duties to be completed both from home and on‑site, with a structured schedule designed to support flexibility, business objectives, and consistent collaboration.

Work Experience:

• Minimum 5 years hands‑on experience administering and engineering Microsoft 365 in a mid‑to‑large organization is required.
• Strong expertise in:
  • Exchange Online (mail flow, connectors, transport rules, anti‑spam/anti‑phishing)
  • SharePoint Online and OneDrive (sites, permissions, sharing, content lifecycle)
  • Microsoft Teams (teams/channels, meeting policies, calling, governance)
  • Microsoft Entra ID / Azure AD (identity, conditional access, MFA, SSO) is required.
• Practical experience with Microsoft 365 security and compliance features such as DLP, sensitivity labels, retention/records management, eDiscovery, and auditing is required.
• Experience designing and supporting workflows and business solutions using Power Automate and Power Apps; familiarity with Power BI is a plus is required.
• Familiarity with hybrid environments (on‑premises AD, hybrid Exchange, file servers) and migration approaches to Microsoft 365 is required.
• Solid understanding of core networking, DNS, authentication, and email security concepts as they relate to Microsoft 365 is required.
• Financial services or regulated environment experience is preferred.

Education, Licenses, and Certifications:

• Bachelors Degree in Information Systems, Computer Science, Cybersecurity, or a related field; or equivalent combination of education and relevant experience is required.
• Certification/License At least two MS certifications, such as:
  • Microsoft 365 Certified: Enterprise Administrator Expert
  • Microsoft 365 Certified: Security Administrator Associate or Messaging/Teams/Endpoint Administrator Associate
  • Microsoft Certified: Azure Administrator Associate Required

Certification/License Security or compliance certifications, such as: CompTIA Security and SSCP is preferred

Other Skills

• Ability to clearly communicate technical concepts, risks, and options to both technical and non‑technical audiences.
• Strong documentation skills, including writing standards, procedures, and user‑friendly guides.
• Comfortable leading training sessions, demonstrations, and stakeholder meetings to explain Microsoft 365 capabilities and upcoming changes.
• Strong analytical and problem‑solving skills, with a structured approach to troubleshooting and root cause analysis.
• Experience with scripting/automation (e.g., PowerShell) for Microsoft 365 administration and configuration management.
• Familiarity with IT service management (ITSM) practices, including change management, incident management, and request fulfillment.
• Commitment to staying current with Microsoft 365 releases, security best practices, and regulatory expectations impacting cloud services.
• Willingness to support flexible hours, including early mornings, evenings, or weekends for maintenance windows, migrations, and critical changes.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.