Principal Microsoft Cloud Platform Engineer

envista; Brea (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Envista is seeking a Principal Microsoft Cloud Platform Engineer to own the Microsoft cloud platform strategy, architecture, and lifecycle. This senior individual contributor leads through technical excellence, architecture reviews, and mentoring to advance Envista's platform engineering transformation.

You will partner with business, infrastructure, cybersecurity, and MSP teams to ensure secure, reliable, and scalable cloud services, delivering roadmaps and governance while driving automation

Qualifications

• Bachelor's degree or equivalent experience.
• 10+ years enterprise Microsoft infrastructure experience.
• 7+ years Microsoft 365 and Azure engineering.
• Experience in enterprise environments supporting 5,000+ users.
• Deep expertise with Entra ID, Exchange Online, Azure governance, disaster recovery, PowerShell, and Infrastructure as Code.

Responsibilities

• Own the Microsoft cloud platform strategy, architecture, engineering, and lifecycle.
• Serve as the technical authority for Microsoft 365, Entra ID, Azure, Defender, Purview, and related services.
• Define engineering standards, governance, architecture patterns, and platform roadmaps.
• Drive automation, standardization, and continuous improvement.
• Establish platform engineering standards, reusable patterns, and architectural guardrails.

Skills

Microsoft infrastructure experience

Microsoft 365 & Azure engineering

Enterprise user support

Education

Bachelor's degree or equivalent experience

Tools

Entra ID

Exchange Online

Azure architecture

PowerShell

Infrastructure as Code

Terraform

Bicep

ARM

Azure DevOps

GitHub

Job description

Job Description

Job Summary

This position is based on‑site and requires four days per week in the Brea office to support collaboration and business needs.

The Principal Microsoft Cloud Platform Engineer serves as the senior technical authority and platform owner for Envista's Microsoft cloud ecosystem. This role owns architecture, engineering, automation, governance, operational excellence, and continuous improvement for Microsoft 365, Entra ID, Azure, identity, collaboration, and cloud governance. This is a senior individual contributor who leads through technical expertise, architecture, mentoring, and engineering excellence.

The role also serves as the service owner for Microsoft cloud platforms and is accountable for platform strategy, lifecycle management, governance, service health, roadmap execution, and technical oversight of Managed Service Provider (MSP) delivery.

The position partners with business, infrastructure, cybersecurity, and vendor teams to ensure Microsoft cloud services deliver secure, reliable, and scalable business outcomes while supporting Envista's platform engineering transformation strategy.

Success in this role is demonstrated through stable platform operations, stronger service ownership and governance accountability; improved reliability, user experience, security posture, and operational efficiency; and delivery of roadmap objectives that advance Envista's platform engineering and infrastructure transformation strategy.

Primary Duties And Responsibilities

Platform Ownership & Technical Leadership

• Own the Microsoft cloud platform strategy, architecture, engineering, and lifecycle
• Serve as the technical authority for Microsoft 365, Entra ID, Azure, Defender, Purview, and related services
• Define engineering standards, governance, architecture patterns, and platform roadmaps
• Drive automation, standardization, and continuous improvement
• Establish platform engineering standards, reusable patterns, and architectural guardrails that promote consistency and operational excellence
• Establish clear service ownership and governance accountability across Microsoft cloud services, improving governance, security, and operational maturity

Microsoft 365 Engineering

• Lead engineering for Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Microsoft 365 administration
• Ensure platform reliability, lifecycle management, security, and service improvement

Identity & Security

• Lead engineering for Entra ID, Conditional Access, Identity Governance, PIM, federation, and authentication
• Partner with Cybersecurity to strengthen enterprise identity

Azure Platform Engineering

• Own Azure Landing Zones, governance, networking, RBAC, Azure Policy, Monitor, Backup, Site Recovery, Azure Virtual Desktop, and platform security
• Define and maintain Azure platform architecture standards, cloud governance controls, operational guardrails, and deployment patterns
• Partner with application, infrastructure, and cybersecurity teams to enable cloud adoption while maintaining compliance and operational readiness

Automation & Platform Engineering

• Drive Infrastructure as Code using Terraform, Bicep, ARM, PowerShell, Azure Automation, Azure DevOps, GitHub, and CI/CD
• Increase automation and Infrastructure as Code adoption to reduce manual effort and strengthen engineering maturity
• Develop reusable automation frameworks that improve speed, consistency, reliability, and scalability across Microsoft cloud services

Operational Excellence

• Maintain reliability, disaster recovery readiness, monitoring, lifecycle management, documentation, and technical debt reduction
• Maintain stable Microsoft platform operations and continuously improve platform reliability, user experience, security posture, and operational efficiency

Knowledge Management

• Reduce dependency on external vendors and individual knowledge holders through documentation, automation, knowledge transfer, and engineering maturity initiatives

Leadership & Vendor Partnership

• Serve as primary technical partner for Microsoft and MSP
• Strengthen Microsoft and MSP partnerships to support effective service delivery and platform outcomes
• Provide technical governance and engineering oversight for MSP-delivered Microsoft cloud services, ensuring alignment with approved architecture standards, operational processes, automation objectives, and platform roadmaps
• Deliver roadmap objectives that support Envista's platform engineering and infrastructure transformation strategy
• Mentor engineers , conduct architecture reviews, and improve engineering standards

Job Requirements

MINIMUM REQUIREMENTS:

• Bachelor's degree or equivalent experience
• 10+ years enterprise Microsoft infrastructure experience
• 7+ years Microsoft 365 and Azure engineering
• Experience in enterprise environments supporting 5,000+ users
• Deep expertise with Entra ID, Exchange Online, Azure architecture, governance, disaster recovery, PowerShell, and Infrastructure as Code

Ex