Senior Microsoft 365 Engineer

Pennant Solutions Group; Richmond (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Pennant Solutions Group is seeking a Senior Microsoft 365 Engineer to manage and optimize the client’s enterprise M365 environment. You will architect, deploy, and maintain robust cloud collaboration solutions in a hybrid on-site/off-site model.

Responsibilities include admin, identity governance, security baselines, and automation using PowerShell. The role involves Tier-3 support and mentoring junior engineers within a contingent, 12-month-plus engagement in Richmond, VA.

Qualifications

• 5+ years managing enterprise Microsoft 365 environments.
• Bachelor's degree in CS/IT or equivalent experience and certs.
• Deep knowledge of Exchange Online, SharePoint Online, OneDrive, Teams and Intune.
• Experience with Entra ID, Entra Connect and hybrid identity.
• PowerShell scripting for tenant administration and automation.
• Strong security basics: MFA, Conditional Access, DLP and retention.
• Strong troubleshooting for identity, auth, and service integration.

Responsibilities

• Administer and optimize Microsoft 365 services (Exchange Online, SharePoint Online, OneDrive, Teams, Intune).
• Configure Entra ID, hybrid identities, and Entra Connect syncs.
• Implement and maintain security baselines, MFA, CA policies, and DLP.
• Manage device compliance and endpoint provisioning via Intune.
• Oversee Exchange Online routing, Teams policies, and SharePoint permissions.
• Develop PowerShell scripts to automate workflows and generate reports.
• Provide Tier-3 escalation support and mentor junior engineers.

Skills

M365 administration

Identity management

PowerShell scripting

Security & governance

Troubleshooting

Education

Bachelor's degree in Computer Science / IT

Tools

Microsoft Graph API

Azure Automation

Logic Apps

Job description

Senior Microsoft 365 Engineer

Job Summary

We are seeking an experienced Senior Microsoft 365 Engineer to manage, secure, and optimize the our client's enterprise cloud collaboration and productivity environment.

In this contingent worker role, you will collaborate with technical teams to architect, deploy, and maintain robust Microsoft 365 solutions.

Role Details

Role Type: Full-time Contingent Worker-12 months plus

Work Model: Hybrid Telework (minimum 3+ days per week onsite in downtown Richmond, VA; telework schedule managed by department leadership)

Location: Richmond, Virginia

---

Key Responsibilities

• M365 Tenant & License Administration: Administer and optimize Microsoft 365 services under the G3 license—including Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft Intune—ensuring high availability, performance, and alignment with organizational needs.
• Identity & Access Management: Configure, maintain, and troubleshoot Microsoft Entra ID (formerly Azure AD), hybrid identity models, Entra Connect sync, and identity governance workflows.
• Security & Compliance: Establish and maintain M365 security baselines, Conditional Access policies, Multi-Factor Authentication (MFA), Data Loss Prevention (DLP), and retention configurations.
• Endpoint Management: Deploy and manage device compliance, application packaging, and configuration profiles via Microsoft Intune.
• Exchange Online & Collaboration Services: Oversee mail flow, routing policies, and advanced Exchange configurations; manage Teams lifecycle governance, channel policies, and voice integrations; oversee SharePoint Online architecture, permissions, and storage lifecycle.
• Automation & Scripting: Develop, execute, and maintain PowerShell scripts to automate administrative workflows, generate compliance reports, and streamline operations.
• Tier-3 Support & Operational Excellence: Provide tier-3 escalation resolution for complex M365 and identity issues, monitor service health and trends, maintain thorough technical documentation, and mentor junior systems engineers.

Required Skills and Qualifications

Minimum Qualifications (Must-Have)

• Experience: 5+ years of hands‑on experience administering enterprise Microsoft 365 environments.
• Education: Bachelor’s degree in Computer Science, Information Technology, or a closely related field (equivalent hands‑on experience and professional technical certifications accepted).
• Core Expertise: Deep technical knowledge of core M365 workloads: Exchange Online, SharePoint Online, OneDrive, Teams, and Intune.
• Identity Management: Proven expertise in Microsoft Entra ID, Entra Connect sync, hybrid architectures, and modern authentication.
• Automation: Demonstrated proficiency with PowerShell scripting for tenant administration and automation.
• Security & Governance: Strong understanding of Microsoft security baselines, MFA, Conditional Access, and compliance tools.
• Troubleshooting: Strong analytical skills to diagnose and resolve complex identity, authentication, and service integration challenges.

Preferred Qualifications (Nice-to-Have)

• 8+ to 12+ years of overall systems engineering and administration experience.
• Master’s degree in Computer Science, IT, or related technical discipline.
• Certifications: Microsoft Certified: Microsoft 365 Certified: Enterprise Administrator Expert / Administrator Associate.
• Advanced Intune and endpoint provisioning experience (Windows Autopilot, MAM).
• Advanced Microsoft Teams architecture knowledge (Direct Routing, PSTN connectivity).
• Experience implementing Zero Trust security architectures (Privileged Identity Management, Identity Protection).
• Exposure to advanced automation tools (Microsoft Graph API, Azure Automation, Logic Apps) and Power Platform governance.
• System administration background with Windows and/or Linux servers.