Senior Microsoft 365 Engineer

Eagle Wireless; Minneapolis (MN); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health care coverage

401(k) program coming in 2026

Paid time off

Job summary

Eagle Wireless is seeking a Senior Microsoft 365 Engineer to own and operate a global Microsoft 365 environment for ~190 users across six countries. You will design identity architecture, Conditional Access, and device management, and lead Defender and domain security efforts.

You’ll implement tenant-wide changes with safe rollout, leveraging Entra ID, Intune, and Defender in production. This role requires hands-on execution and strong design judgment to safeguard a complex cloud estate.

Qualifications

• 7+ years in Microsoft cloud administration with depth in identity, endpoint, and security.
• Entra ID tenant ownership and device fleet management.
• Certifications such as SC-300, MS-102, AZ-500, MD-102 preferred; ability demonstrated.
• Proficient in modern authentication, token flows, OIDC/SAML/SCIM, and enterprise apps vs registrations.
• Hands-on incident response in M365: containment, token revocation, audit logs.

Responsibilities

• Own Entra ID end-to-end architecture and CA design.
• Manage Intune as device fleet control plane and CA signals.
• Oversee Microsoft Defender XDR policies, tuning, and investigations.
• Lead email and domain security posture (DMARC/DKIM/SPF, Exchange Online protection).
• Drive hardening programs with Secure Score, rollout of changes with governance.
• Provide security posture evidence for customer questionnaires and ISO-aligned controls.

Skills

Entra ID administration

Identity & access management

Endpoint management

Security

PowerShell

Microsoft Graph

OIDC/SAML/SCIM

Incident response

Tools

PowerShell

Microsoft Graph

Job description

Eagle Wireless is a connectivity company delivering secure, reliable, and scalable cellular modules and solutions for automotive and IoT applications. With a strong presence in the United States and global R&D teams across North America, Europe, and APAC, Eagle Wireless supports customers worldwide with long-life, compliant, and cyber-secure connectivity products. Focused on trust, supply chain resilience, and regulatory compliance, Eagle Wireless helps OEMs, Tier 1 suppliers, and IoT innovators deploy connected technologies with confidence in an increasingly complex global environment.

We are looking for: Senior Microsoft 365 Engineer

This is a tenant-owner role. Your mandate is command and control of our Microsoft 365 environment: a single global tenant and its endpoint fleet, serving ~190 people across six countries, consolidated from three acquired companies. You will design and run identity architecture, Conditional Access, device management, and the Defender stack, and you will set the standard for how tenant-wide change is made safely. Architect-level judgment, hands-on execution. You design it, you build it, you own it in production.

What You'll Own

• Identity. Entra ID architecture end to end: Conditional Access design and lifecycle, authentication methods and MFA policy, PIM and least-privilege role design, app registrations and enterprise apps, consent governance, and identity lifecycle from provisioning to offboarding.
• Endpoints. Intune as the control plane for the global device fleet: compliance policies, configuration baselines, enrollment standards, and the device-trust signals that feed Conditional Access. Every endpoint managed, measured, and recoverable.
• The Defender stack. Microsoft Defender XDR across identity, email, and endpoint: policy, tuning, and verification. Alert routing, audit logging coverage, and the investigation runbooks the team responds with.
• Email and domain security. DMARC/DKIM/SPF and domain authentication posture, Exchange Online protection policies, and the identity workstreams that come with integrating acquired entities.
• Hardening as a program. Secure Score and baseline tracking against a defined checklist, deployment rings for tenant-wide changes, and change-managed rollout - improvements ship weekly, safely.
• Security posture evidence. The technical answers behind customer security questionnaires and our ISO 27001-aligned control set.

What We're Looking For

• 7+ years in Microsoft cloud administration with clear depth in identity, endpoint, and security - you have owned an Entra ID tenant and its device fleet, not just worked in one.
• Demonstrated skills at the level of SC-300 (Identity and Access), MS-102 (M365 Administrator Expert), AZ-500 (Azure Security), and MD-102 (Intune). Certifications are strongly preferred; demonstrated ability is required. Our interview includes a design exercise - we give you a real problem, you show us the solution.
• Fluency in the identity layer beneath the portal: modern authentication and token flows, OIDC/SAML/SCIM, delegated vs. application permissions, enterprise apps vs. app registrations, and what the sign-in and audit logs actually tell you when something is wrong.
• Hands-on incident response experience in an M365 environment: containment, token and session revocation, scope investigation through the unified audit log, and Defender alert triage.
• PowerShell / Microsoft Graph proficiency - you automate and verify rather than click and hope.
• Judgment for tenant-wide change in a business that runs on this platform: you know a bad Conditional Access or compliance policy can lock out a company, and you design rollouts accordingly.

Growth

You will be the most senior Microsoft practitioner in the company, working directly with the Head of IT. The environment you own is growing - more people, more sites, more systems hanging off the tenant - and your scope and influence grow with it. We won't promise a title track we haven't built yet; we will promise real ownership, hard problems, and a company that advances the people who deliver.

Compensation and Benefits

• Fully paid health care coverage.
• 401(k) program coming in 2026.
• Paid time off.

Eagle Wireless is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Only shortlisted candidates will be contacted!