Sr. Microsoft 365 Administrator (L2/L3) - (Fluency in Mandarin is Preferred)

iSoftStone; Palo Alto (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

iSoftStone in Palo Alto, CA, is seeking a Senior Microsoft 365 Administrator (L2/L3) to design, implement, and operate enterprise Microsoft 365 environments, combining solution architecture, system engineering, and advanced administration.

You will own identity and access concepts, endpoint management with Intune/UEM, security baselines, and hybrid on-prem cloud integrations, delivering secure, scalable collaboration and endpoint platforms for the organization.

Qualifications

• Five to eight+ years of Microsoft 365 administration and engineering experience.
• Advanced PowerShell scripting skills.
• Solid understanding of identity protocols (SAML, OAuth, OpenID Connect).
• Experience with hybrid environments (on-prem and cloud).
• Strong architectural thinking with hands-on execution ability.

Responsibilities

• Lead solution design and technical architecture for Microsoft 365 and related services.
• Provide L2/L3 support for Microsoft 365 services and perform root cause analysis.
• Administer Intune and UEM platforms; manage endpoint security baselines.
• Design and implement SSO, MFA, and Conditional Access architectures.
• Develop automation using PowerShell and reusable tooling.
• Collaborate with security teams on monitoring, alerting, and incident response.

Skills

PowerShell scripting

Microsoft 365 administration

Hybrid environments

Strong communication

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

Job description

Job: Sr. Microsoft 365 Administrator (L2/L3)

(Fluency in Mandarin is Preferred)

We are seeking a highly skilled Senior Microsoft 365 System Administrator (L2/L3) to support the design, implementation, and ongoing operations of enterprise Microsoft 365 environments. This role combines solution architecture, system engineering, and advanced administration, ensuring secure, scalable, and reliable collaboration and endpoint platforms.

Responsibilities:

Solution Design and Architecture

• Lead solution design and technical architecture for Microsoft 365 and related services
• Translate business and security requirements into scalable, secure, and supportable solutions
  • Identity & access (SSO, Conditional Access, Zero Trust)
  • Endpoint management (Intune / UEM)
• Produce high-level and low-level design (HLD/LLD) documentation
• Evaluate new features and technologies, and provide design recommendations and roadmaps
• Ensure solutions align with enterprise standards for security, compliance, and performance

System Administration (L2/L3 Support)

• Provide L2/L3 support for Microsoft 365 services, including escalation handling and root cause analysis
• Exchange Online, Teams, SharePoint Online, OneDrive
• Troubleshoot complex issues across identity, messaging, collaboration, and endpoint environments

Endpoint Management and Security

• Administer Microsoft Intune and UEM platforms
• Manage device compliance, configuration profiles, and application deployment
• Operate and optimize EDR solutions such as Microsoft Defender for Endpoint
• Design and implement endpoint security baselines and compliance policies
• Support enterprise endpoint strategy across Windows, macOS, and mobile devices

Identity and Access Management

• Design and implement SSO, MFA, and Conditional Access architectures
• Integrate enterprise applications using SAML, OAuth, and OpenID Connect
• Support hybrid identity (on-prem AD + cloud) and identity lifecycle management
• Contribute to identity governance and Zero Trust initiatives

Automation and Scripting

• Develop and maintain automation using PowerShell
• Build reusable scripts and tooling for provisioning, reporting, and compliance
• Improve operational efficiency through automation and standardization

Network and Infrastructure Integration

• Troubleshoot and design solutions related to DNS, authentication, and connectivity
• Work with network teams on secure access (proxy, firewall, conditional access integration)
• Ensure reliable service integration across cloud and on-prem environments

Security and Compliance

• Implement Microsoft 365 security controls and policies aligned with best practices
• Support audit, compliance, and eDiscovery requirements
• Collaborate with security teams on monitoring, alerting, and incident response

Qualifications:

• Five to eight+ years of Microsoft 365 administration and engineering experience
• Strong hands‑on expertise in:
  • Microsoft 365 core services (Exchange Online, Teams, SharePoint)
• Advanced PowerShell scripting skills
• Solid understanding of:
  • Identity protocols (SAML, OAuth, OpenID Connect)
  • DNS, networking, and security fundamentals
• Experience with hybrid environments (on-prem and cloud)
• Strong architecture thinking with hands‑on execution ability
• Ability to translate requirements into practical technical designs
• Strong troubleshooting and problem‑solving skills
• Effective communication with cross‑functional stakeholders
• Ability to design solutions and contribute to architecture decisions, implement and optimize systems end‑to‑end, and provide advanced L2/L3 operational support

Preferred Qualifications:

• Experience with Zero Trust architecture design
• Familiarity with SIEM tools such as Microsoft Sentinel
• Experience in enterprise or global environments