Get AI-powered advice on this job and more exclusive features.
Welcome to Clearway Health — a recognized Great Place to Work® and destination organization! We are an award-winning culture where talented people are respected, informed, engaged, empowered, and developed – and where they want to grow and make a difference. We offer a wide range of benefits, perks and wellness programs in addition to continuous learning opportunities to help you grow. At Clearway Health, diversity, equity, inclusion and belonging are an essential part of our business and workplace culture. Clearway Health emerged from Boston Medical Center to improve access to care, provide personal support, and manage the complex specialty medication needs of vulnerable patients and their families. We partner with hospitals, health systems and communities to accelerate specialty pharmacy programs. At Clearway Health, we proudly embrace our High Five! values to provide best-in-class experiences for our employees, our clients and their patients. We welcome you to follow us on LinkedIn where you can also learn more about our company, culture, people, and careers.
Position Summary
The Senior Microsoft Engineer will lead the secure design, configuration, and lifecycle management of Clearway’s Microsoft 365 environment, including Intune, Entra ID, SharePoint, Teams, and Microsoft Defender. This position owns Microsoft configuration and compliance posture, ensuring alignment with AICPA SOC 2 Type 2, ISO/IEC 27001 and NIST SP 800-53 standards.
Essential Responsibilities/Duties
- Architect and manage Microsoft 365 including Exchange Online, SharePoint, Teams, OneDrive and Entra ID.
- Build and maintain Intune compliance & configuration profiles for Windows and macOS devices.
- Implement Conditional Access, MFA and SSO policies across all user and application contexts.
- Harden Microsoft environments according to AICPA SOC 2 Type 2, ISO 27001, NIST SP 800-53 and CIS Benchmarks.
- Administer Microsoft Defender for Endpoint, Defender for Office 365 and Defender for Identity.
- Automate configuration and reporting tasks using PowerShell and Microsoft Graph API.
- Manage third‑party endpoint applications deployed through Intune.
- Maintain comprehensive asset and license inventories.
- Work with the Senior Systems Engineer to automate onboarding and off‑boarding processes.
- Provide configuration documentation and audit evidence for compliance frameworks.
Education
- College degree required. May consider experience in absence of a diploma.
Certificates, Licenses, Registrations
- MCSE or Microsoft 365 Certified: Enterprise Administrator Expert (required or within six months of hire).
- Microsoft Certified: Security Administrator Associate (SC-200 or SC-300) preferred.
- Familiarity with Microsoft Purview, DLP and hybrid identity environments (Microsoft and AWS).
- Familiarity with Terraform or Infrastructure-as-Code principles.
Experience
- Minimum of 5 years enterprise experience in Microsoft 365 administration and security.
- Deep knowledge of Intune, Entra ID (Azure AD), Conditional Access and Microsoft 365 tenant management.
- Demonstrated success in hardening environments to AICPA SOC 2 Type 2, HIPAA and NIST SP 800-53 standards.
- Strong PowerShell scripting and automation skills.
- Experience managing third‑party endpoint applications and asset inventories.
- Excellent troubleshooting, documentation and communication skills.
Knowledge and Skills
Deep expertise in Microsoft 365 / Entra ID / Intune architecture
- Understanding of tenant‑level configuration, identity governance, Conditional Access, SSO and lifecycle management.
Knowledge of modern device management and provisioning
- Experience with Windows Autopilot, macOS ADE, configuration profiles and application deployment.
Understanding of enterprise collaboration platforms
- SharePoint Online, Teams, OneDrive structure and lifecycle management with best practices for permissions and provisioning.
Automation and scripting proficiency
- Strong PowerShell and Microsoft Graph scripting to automate provisioning, reporting and environment configuration.
Technical problem‑solving and troubleshooting
- Ability to quickly diagnose issues across identity, devices, applications and network dependency layers.
Documentation and configuration design
- Ability to create runbooks, diagrams and repeatable configuration standards for infrastructure operations.
Ability to plan and execute infrastructure changes without service disruption
- Demonstrated success managing Microsoft platform changes, updating policies and coordinating roll‑out across the business with zero downtime.
Ability to lead platform ownership and cross‑team collaboration
- Coordinate with IT, security, vendors and business units to ensure the Microsoft environment is scalable, reliable and aligned to business needs.
Special Working Conditions (On‑call, Travel, Shift, Coverage)
10% travel for meetings and strategy sessions.
Seniority Level
Mid‑Senior level
Employment Type
Full‑time
Job Function
Information Technology
Industries
Hospitals and Health Care
Referrals increase your chances of interviewing at Clearway Health by 2x.