Senior M365 Governance Engineer

Hearst; Charlotte (NC); On-site; USD 130,000 - 170,000; Full time

Job summary

Hearst Technology Services is seeking a senior-level M365 Governance Engineer to own governance across Exchange Online and Teams, with a close partnership to the Enterprise Apps team on SharePoint and OneDrive. This role emphasizes policy by design, lifecycle management, and data protection to keep our messaging and collaboration secure and scalable.

You will design policies, enforce controls, build dashboards, and collaborate across security, compliance, and business units to drive adoption of

Qualifications

• 7+ years in Microsoft 365 governance, compliance, or admin with Exchange Online and/or Teams experience.
• Proficient in PowerShell for governance automation and reporting.
• Familiar with GDPR, HIPAA, SOC 2, ISO 27001, and NIST in messaging/governance.

Responsibilities

• Design, implement, and maintain governance policies for Exchange Online and Teams.
• Configure retention policies, DLP, and sensitivity labels across mail and Teams via Purview.
• Own external sharing and guest access governance in Teams.
• Build dashboards to track compliance posture and license utilization.
• Partner with security and compliance teams for audits and regulatory needs.
• Develop automation using PowerShell and Graph API for governance tasks.
• Conduct access reviews and governance audits to remediate policy drift.
• Create and maintain governance docs, runbooks, and training materials.

Skills

Microsoft 365 governance

PowerShell scripting

Graph API

Data Loss Prevention

Regulatory compliance

Documentation

Policy enforcement

Tools

Microsoft Purview

Power BI

Microsoft Graph API

Job description

Hearst Technology Services is seeking a senior-level M365 Governance Engineer to own the governance framework across our Microsoft 365 messaging and collaboration platforms, including Exchange Online and Teams, while partnering with the Enterprise Apps team on SharePoint and OneDrive.

This role is primarily focused on governance: developing a governance plan and designing and enforcing lifecycle management, retention, data protection, and access and sharing controls to ensure that our messaging and collaboration environment remains secure, compliant, and well organized as it scales. This work will be performed in close partnership with our GRC team.

Hands-on engineering of Exchange Online and Teams is part of the role, but it exists in service of governance. You will not simply keep the platforms running; you will ensure that everything operating on them follows policy by design—not as an afterthought.

Responsibilities

Governance (Primary Focus)

• Design, implement, and maintain governance policies for Exchange Online and Teams, including naming conventions, provisioning workflows, and full lifecycle management (creation, ownership, archival, and deletion) for mailboxes, distribution lists, Microsoft 365 Groups, and Teams
• Configure and maintain retention policies, sensitivity labels, and Data Loss Prevention (DLP) rules using Microsoft Purview across mail and Teams content
• Own external sharing, guest access, and permissions governance within Teams to prevent oversharing and reduce data exposure risk
• Build and maintain dashboards and reports (Power BI, Purview, or native M365 admin reporting) to track compliance posture, license utilization, and governance policy adherence
• Partner with security and compliance teams to support audits, eDiscovery requests, and regulatory requirements (e.g., GDPR, HIPAA, SOC 2, ISO 27001) as they relate to messaging and collaboration data
• Develop automation (PowerShell, Microsoft Graph API, Power Automate) to streamline governance tasks such as orphaned mailbox/Team cleanup, ownership certification, and policy enforcement
• Conduct periodic access reviews and governance audits of mailboxes and Teams to identify and remediate policy drift
• Create and maintain governance documentation, runbooks, and training materials, and act as the escalation point for governance-related incidents (e.g., oversharing, policy violations, misconfigured permissions)
• Collaborate with team owners and business units to drive adoption of governance best practices without unnecessarily blocking productivity
• Evaluate new Microsoft 365 governance and compliance features as they are released, assessing impact before tenant-wide rollout

Messaging & Collaboration Engineering (Supporting)

• Administer and engineer Exchange Online, including mail flow rules, connectors, distribution lists/shared mailboxes, and anti-spam/anti-phishing configuration
• Support Microsoft Teams architecture, including calling/voice (if applicable), meeting policies, channel structure, and Teams app management
• Monitor service health, plan for capacity/licensing needs, and troubleshoot platform-level issues in partnership with Microsoft support when needed

Qualifications

Required Qualifications

• 7+ years of hands-on experience in Microsoft 365 governance, compliance, or administration, with direct experience in Exchange Online and/or Microsoft Teams environments
• Strong experience with Microsoft Purview (Compliance Center), including retention labels/policies, DLP, and sensitivity labels
• Proven track record designing and enforcing lifecycle management, naming conventions, and access/sharing governance for mailboxes, groups, and Teams
• Proficiency in PowerShell scripting for M365 governance automation (Exchange Online, Teams modules)
• Familiarity with Microsoft Graph API for governance automation and reporting
• Working knowledge of common regulatory and compliance frameworks (GDPR, HIPAA, SOC 2, ISO 27001, NIST) as they apply to messaging/collaboration governance
• Working understanding of Exchange Online mail flow and Teams architecture sufficient to apply governance controls effectively
• Experience with M365 license management and optimization
• Strong analytical and documentation skills, with the ability to translate technical policy into clear guidance for non-technical stakeholders

Preferred Qualifications

• Microsoft certifications such as SC-400 (Information Protection Administrator), MS-102 (Microsoft 365 Administrator), or MS-700 (Managing Microsoft Teams)
• Background in IT compliance, risk management, or audit support
• Experience supporting M365 Copilot data readiness for messaging and collaboration content (oversharing remediation, sensitivity label coverage)
• Experience with Power Automate and Power BI for governance reporting and workflow automation
• Exposure to ITIL or change management frameworks
• Familiarity with Teams Phone/voice engineering (direct routing, calling plans, PSTN connectivity)
• Background in messaging migrations (e.g., legacy Exchange, other email platforms, or Teams/Slack migrations)

Soft Skills

• Clear communicator, able to explain governance rationale to both technical and non-technical audiences
• Comfortable balancing security/compliance requirements against user productivity and business needs
• Detail-oriented with strong follow-through on policy enforcement and documentationCollaborative mindset — this role touches nearly every team in the organization

About Us

Hearst is a leading global, diversified information, services, and media company dedicated to innovating, informing audiences and leading with purpose, integrity and a culture of care.

Our portfolio includes more than 360 businesses worldwide. On the consumer side, we operate 35 television stations, 28 daily newspapers and publish more than 200 magazine editions featuring many of the most iconic brands in media. We also hold ownership stakes in leading cable networks such as A&E, HISTORY, Lifetime and ESPN. On the business‑to‑business side, our companies include Fitch Group, a global leader in financial information and analytics; Hearst Health, which provides intelligence and software that improve care outcomes; and Hearst Transportation, which delivers data and software for aviation, automotive and trucking.

We are an Equal Opportunity Employer and makes employment decisions without regard to race, color, religion, national origin, sex or gender, sexual orientation, gender identity, gender expression, age, disability, military or veteran status or any other status protected by federal, state, or local law. We also provide reasonable accommodations to applicants and employees consistent with applicable law.