Principal Microsoft Cloud Platform Engineer

Envista Holdings Corporation; Brea (CA); On-site; USD 187,000 - 229,000; Full time

Job summary

Envista Holdings Corporation is seeking a senior Principal Microsoft Cloud Platform Engineer to own the Microsoft cloud platform strategy, architecture, and lifecycle. You will lead engineering for Microsoft 365, Entra ID, Azure, and related services, ensuring security, reliability, and governance.

The role emphasizes platform ownership, MSP collaboration, and driving automation. Based on-site in the Brea, CA area, this senior IC role partners with cybersecurity and vendor teams to advance

Qualifications

• Bachelor's degree or equivalent experience.
• 10+ years enterprise Microsoft infrastructure experience.
• 7+ years Microsoft 365 and Azure engineering.
• Experience in enterprise environments supporting 5,000+ users.
• Deep expertise with Entra ID, Exchange Online, Azure architecture, governance, disaster recovery, PowerShell, and Infrastructure as Code.
• Experience partnering with Managed Service Providers.
• Demonstrated experience establishing platform governance, architecture standards, and technology roadmaps.
• Experience operating within a platform engineering, cloud center of excellence, or service ownership model.

Responsibilities

• Platform Ownership & Technical Leadership: Own the Microsoft cloud platform strategy, architecture, engineering, and lifecycle.
• Define engineering standards, governance, architecture patterns, and platform roadmaps.
• Drive automation, standardization, and continuous improvement.
• Establish platform engineering standards, reusable patterns, and architectural guardrails that promote consistency and operational excellence.
• Establish clear service ownership and governance accountability across Microsoft cloud services.
• Microsoft 365 Engineering Lead for Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Microsoft 365 administration.
• Ensure platform reliability, lifecycle management, security, and service improvement.
• Identity & Security Lead for Entra ID, Conditional Access, Identity Governance, PIM, federation, and authentication.

Skills

Entra ID

Exchange Online

Azure

Microsoft 365

Governance

PowerShell

Infrastructure as Code

MSP collaboration

Security governance

Education

Bachelor's degree or equivalent experience

Tools

Terraform

Bicep

ARM

PowerShell

Azure DevOps

GitHub

Job description

Job Description: JOB SUMMARY: This position is based on‑site and requires four days per week in the Brea office to support collaboration and business needs. The Principal Microsoft Cloud Platform Engineer serves as the senior technical authority and platform owner for Envista's Microsoft cloud ecosystem. This role owns architecture, engineering, automation, governance, operational excellence, and continuous improvement for Microsoft 365, Entra ID, Azure, identity, collaboration, and cloud governance. This is a senior individual contributor who leads through technical expertise, architecture, mentoring, and engineering excellence. The role also serves as the service owner for Microsoft cloud platforms and is accountable for platform strategy, lifecycle management, governance, service health, roadmap execution, and technical oversight of Managed Service Provider (MSP) delivery. The position partners with business, infrastructure, cybersecurity, and vendor teams to ensure Microsoft cloud services deliver secure, reliable, and scalable business outcomes while supporting Envista's platform engineering transformation strategy. Success in this role is demonstrated through stable platform operations, stronger service ownership and governance accountability; improved reliability, user experience, security posture, and operational efficiency; and delivery of roadmap objectives that advance Envista's platform engineering and infrastructure transformation strategy.

PRIMARY DUTIES AND RESPONSIBILITIES

• Platform Ownership & Technical Leadership Own the Microsoft cloud platform strategy, architecture, engineering, and lifecycle Serve as the technical authority for Microsoft 365, Entra ID, Azure, Defender, Purview, and related services
• Define engineering standards, governance, architecture patterns, and platform roadmaps
• Drive automation, standardization, and continuous improvement
• Establish platform engineering standards, reusable patterns, and architectural guardrails that promote consistency and operational excellence
• Establish clear service ownership and governance accountability across Microsoft cloud services, improving governance, security, and operational maturity
• Microsoft 365 Engineering Lead engineering for Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Microsoft 365 administration
• Ensure platform reliability, lifecycle management, security, and service improvement
• Identity & Security Lead engineering for Entra ID, Conditional Access, Identity Governance, PIM, federation, and authentication
• Partner with Cybersecurity to strengthen enterprise identity
• Azure Platform Engineering Own Azure Landing Zones, governance, networking, RBAC, Azure Policy, Monitor, Backup, Site Recovery, Azure Virtual Desktop, and platform security
• Define and maintain Azure platform architecture standards, cloud governance controls, operational guardrails, and deployment patterns
• Partner with application, infrastructure, and cybersecurity teams to enable cloud adoption while maintaining compliance and operational readiness
• Automation & Platform Engineering Drive Infrastructure as Code using Terraform, Bicep, ARM, PowerShell, Azure Automation, Azure DevOps, GitHub, and CI/CD
• Increase automation and Infrastructure as Code adoption to reduce manual effort and strengthen engineering maturity
• Develop reusable automation frameworks that improve speed, consistency, reliability, and scalability across Microsoft cloud services
• Operational Excellence Maintain reliability, disaster recovery readiness, monitoring, lifecycle management, documentation, and technical debt reduction
• Maintain stable Microsoft platform operations and continuously improve platform reliability, user experience, security posture, and operational efficiency
• Knowledge Management Reduce dependency on external vendors and individual knowledge holders through documentation, automation, knowledge transfer, and engineering maturity initiatives
• Leadership & Vendor Partnership Serve as primary technical partner for Microsoft and MSP
• Strengthen Microsoft and MSP partnerships to support effective service delivery and platform outcomes
• Provide technical governance and engineering oversight for MSP-delivered Microsoft cloud services, ensuring alignment with approved architecture standards, operational processes, automation objectives, and platform roadmaps
• Deliver roadmap objectives that support Envista's platform engineering and infrastructure transformation strategy
• Mentor engineers, conduct architecture reviews, and improve engineering standards

Job Requirements

MINIMUM REQUIREMENTS

• Bachelor's degree or equivalent experience
• 10+ years enterprise Microsoft infrastructure experience
• 7+ years Microsoft 365 and Azure engineering
• Experience in enterprise environments supporting 5,000+ users
• Deep expertise with Entra ID, Exchange Online, Azure architecture, governance, disaster recovery, PowerShell, and Infrastructure as Code
• Experience partnering with Managed Service Providers
• Demonstrated experience establishing platform governance, architecture standards, and technology roadmaps
• Experience operating within a platform engineering, cloud center of excellence, or service ownership model

REQUIRED TECHNICAL EXPERTISE

• Microsoft Cloud Azure, Microsoft 365, Exchange Online, Teams, SharePoint, OneDrive, Entra ID, Defender, Purview, Sentinel, Azure Policy, Azure Monitor, Azure Backup, Azure Site Recovery, and Azure Virtual Desktop
• Automation PowerShell, Terraform, Bicep, ARM, Azure DevOps, GitHub, CI/CD, and REST APIs
• Infrastructure Windows Server, Active Directory, DNS, PKI, Networking, Disaster Recovery, and Cloud Governance

PREFERRED SKILLS & EXPERIENCE

• Azure Solutions Architect Expert, Microsoft 365 Administrator Expert, Azure Administrator, Identity & Access Administrator, or Security certifications
• Experience with FastTrack, tenant migrations, M&A, enterprise governance, and platform engineering

Target Market Salary Range

Actual compensation packages take into account a wide range of factors that are unique to each candidate, including but not limited to geographic location; skill sets; relevant education and certifications; depth of experience; performance; and other business and organizational needs. The disclosed reasonable estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Envista, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. The total compensation package for this position may also include an annual performance bonus, medical/dental/vision benefits, 401K match, and/or other applicable compensation plans.

$187,300 - $228,900

Operating Company

Corporate Envista is a global leader in the dental industry, uniting more than 30 trusted brands—including DEXIS, Kerr, Nobel Biocare, and Ormco—under one mission: partnering with dental professionals to improve patients’ lives. With a heritage of category-defining innovation, our brands have shaped modern dentistry: Nobel Biocare introduced the first dental implant, Ormco is a pioneer in both traditional and digital orthodontics, DEXIS has long been at the forefront of 2D, 3D and intraoral imaging, and Kerr has supported clinicians for over 135 years. Our high-performing culture is underpinned by our CIRCLe Values and the Envista Business System. Guided by these, we deliver a comprehensive portfolio of technologies, consumables, and services that empower clinicians to provide confident, efficient care—today and for the future. Learn more at http://envistaco.com. Envista and all Envista Companies are equal opportunity employers that evaluate qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. The “EEO is the Law” poster is available at: http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf. Envista and its family of companies (Envista) will not accept unsolicited resumes from any source other than directly from a candidate. Envista will consider unsolicited referrals and/or resumes submitted by vendors such as search firms, staffing agencies, professional recruiters, fee‑based referral services and recruiting agencies (Agency) to have been referred by the Agency free of charge and Envista will not pay a fee for any placement resulting from the receipt such unsolicited resumes. An Agency must obtain advance written approval from Envista's internal Talent Acquisition or Human Resources team to submit resumes, and then only in conjunction with a valid fully‑executed contract approved by the Global Talent Acquisition leader and in response to a specific job opening. Envista will not pay a fee to any Agency that does not have such agreement and written approval in place. Envista is a global family of more than 30 trusted dental brands, united by a shared purpose: to partner with professionals to improve lives. Envista helps its customers deliver the best possible patient care through industry‑leading dental consumables, solutions, technology, and services. Our comprehensive portfolio, including dental implants and treatment options, orthodontics, and digital imaging technologies, covers an estimated 90% of dentists' clinical needs for diagnosing, treating, and preventing dental conditions as well as improving the aesthetics of the human smile. Envista companies, including DEXIS, Kerr, Nobel Biocare and Ormco, partner with dental professionals to help them deliver the best possible patient care. Envista became an independent company in 2019. We brought with us the proven Envista Business System (EBS) methodology, an experienced leadership team, and a strong culture grounded in continuous improvement, commitment to innovation, and deep customer focus to meet the end‑to‑end needs of dental professionals worldwide. Envista is now one of the largest global dental products companies, with significant market positions in some of the most attractive segments of the dental products industry. For more information, please visit www.envistaco.com.