Senior M365 Platform Engineer: Identity & Governance

University Hospitals Urgent Care by WellStreet; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

WellStreet Urgent Care is seeking an engineer to own the Microsoft 365 platform in an environment where identity and data governance are HIPAA obligations and not checkboxes. The governance you implement is what we’ll run, and how it’s managed is yours to define.

You’ll design sensitivity labels, enforce DLP, configure Entra ID and Intune at tenant level, and drive automation with Graph, PowerShell, and code repos to replace manual admin centers.

Qualifications

• Five or more years in M365, identity or security engineering with tenant‑level depth in Entra ID and Intune.
• Purview configuration experience: writing DLP policies, labeling, retention, eDiscovery.
• Microsoft Graph and PowerShell fluency; automation against the API; Python is a plus.
• Version control with branches and pull requests as normal practice.
• Experience in a regulated framework (HIPAA, HITRUST, SOC 2 or PCI) with ability to explain controls.
• Daily use of AI and know where to apply review before touching PHI.

Responsibilities

• Design the sensitivity label taxonomy and DLP policies across Exchange, SharePoint and Teams.
• Implement SSO and SCIM for clinical vendors and ensure proper deprovisioning workflows.
• Close quarterly access reviews on privileged groups using Graph scripts.
• Triage CVEs from SecOps and manage remediation timelines.
• Migrate Intune configuration into the repository and manage tenant settings.

Tools

Terraform

Bicep

Azure DevOps pipelines

Microsoft365DSC

Job description

WellStreet Urgent Care is seeking an engineer to own the Microsoft 365 platform in an environment where identity and data governance are HIPAA obligations and not checkboxes. The governance you implement is what we’ll run, and how it’s managed is yours to define.

You’ll design sensitivity labels, enforce DLP, configure Entra ID and Intune at tenant level, and drive automation with Graph, PowerShell, and code repos to replace manual admin centers.