Staff M365 Engineer

Penn Mutual; Northern (KY); Hybrid; USD 145,000 - 165,000; Full time

Job summary

Penn Mutual is seeking a Staff M365 Engineer to lead the architecture, engineering, security, and reliability of our Microsoft 365 ecosystem across the enterprise. This senior technical role combines hands-on expertise with architectural leadership to enable secure, scalable productivity.

You will drive governance, migrations, and integrations (Entra ID/Azure AD, Graph API) while aligning with business goals.

Qualifications

• 10+ years of enterprise collaboration or workplace engineering.
• 5+ years of hands-on Microsoft 365 experience.
• Expert-level Exchange Online, SharePoint Online/OneDrive, and Teams.
• Strong knowledge of Entra ID/Azure AD and IAM.
• Experience with governance, security and compliance.

Responsibilities

• Design and implement M365 architecture across Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, and Copilot.
• Ensure security, governance, and compliance for the M365 environment.
• Plan and execute migrations (e.g., Zoom to Teams).
• Drive reliability, monitoring, incident response, and runbooks.
• Lead adoption strategies and guardrails for Copilot.

Skills

M365 expertise

Exchange Online

SharePoint Online

PowerShell automation

Azure AD

Governance & security

Tools

Microsoft Graph

Power Automate

Power Apps

Microsoft 365 Defender

Purview

Job description

## Staff M365 EngineerApply: Remote - United States: Full time: Posted Yesterday: R-100676**Job Description:**At Penn Mutual, we're seeking a **Staff M365 Engineer** who is passionate about shaping and supporting the modern workplace experience. In this role, you'll serve as a senior technical leader responsible for the architecture, engineering, security, and reliability of our Microsoft 365 ecosystem across the enterprise.As the technical authority for M365 platforms including Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, and Copilot, you'll help ensure our environment remains secure, scalable, resilient, and aligned with business productivity goals. This position combines deep hands-on expertise, architectural leadership, and cross-functional collaboration to drive innovation and enablement across the organization, while maintaining strong governance, security, and compliance standards.## ## Key Responsibilities* Microsoft 365 Platform Architecture & Engineering: Serve as enterprise architect and escalation point for Microsoft 365 services. Design, implement, and evolve M365 architecture including Exchange Online, Microsoft Teams (voice, meetings, collaboration), SharePoint Online & OneDrive, Power Platform (Power Automate, Power Apps), and M365 Copilot. Define platform patterns, standards, and configurations for performance, security, and scalability.* Security, Compliance & Governance: Collaborate with Security and Compliance teams to ensure Microsoft 365 aligns with identity and conditional access policies, Data Loss Prevention (DLP), Information Protection, retention, eDiscovery, Microsoft Purview (sensitivity labels, retention policies), and Microsoft Defender for Office 365. Implement and maintain governance for external sharing and guest access, and privileged access (PIM/RBAC). Support audits and regulatory requirements.* Plan, implement and support the migration from Zoom to Teams.* Identity, Access & Integration: Design secure integrations between M365 and Entra ID/Azure AD, IAM solutions (SSO, MFA, Conditional Access), and third-party SaaS and enterprise systems. Define identity and access models for users, service accounts, and automation. Deliver seamless and secure user experiences across devices and locations.* Automation, Reliability & Operations: Drive platform reliability and operational excellence through monitoring, logging, alerting, incident response, and root cause analysis. Automate provisioning, configuration, and lifecycle management using PowerShell, Power Platform, and Infrastructure-as-Code patterns. Advance SRE and ITSM practices. Manage Microsoft 365 service health, own change and release practices, and maintain platform documentation and runbooks.* Copilot & Modern Workplace Enablement: Lead secure enablement of M365 Copilot and collaboration and productivity experiences. Coordinate with Product, L&D, and business teams to deliver adoption strategies and guardrails. Define extensibility patterns for Copilot plugins, integrations, and prompts.* Leadership & Influence: Act as technical mentor to engineers and administrators. Provide architectural guidance in design reviews and change approvals. Influence roadmap decisions with vendors and internal stakeholders. Translate technical decisions into clear business outcomes.## ## Minimum Qualifications* 10+ years of experience in enterprise collaboration or workplace engineering* 5+ years of deep, hands-on Microsoft 365 experience* Expert-level knowledge of Exchange Online, SharePoint Online/OneDrive, and Microsoft Teams (including Teams Phone/voice; Direct Routing preferred)* Strong expertise in Microsoft Entra ID (Azure AD), Identity and access management, PowerShell automation, and Microsoft Graph API and automation tooling* Proven experience supporting large, regulated enterprise environments## ## Required Technical Skills & Knowledge* Core Workloads: Exchange Online, Teams (including Teams Phone), SharePoint Online/OneDrive* Power Platform: Power Automate/Power Apps, DLP, environment governance* Copilot: Microsoft 365 Copilot readiness, governance, adoption, extensibility* Migrations: Tenant-to-tenant consolidation (identity, mail, Teams, SharePoint/OneDrive)* Security & Compliance: Purview (labels/retention/eDiscovery), Defender for Office 365* Identity: Entra ID/Azure AD (Conditional Access, MFA, PIM, RBAC)* Automation & Operations: PowerShell, Microsoft Graph, monitoring/incident/change management* Endpoint: Intune/MDM/MAM concepts and device compliance## ## Preferred Qualifications* Experience enabling and governing M365 Copilot and Power Platform at scale* Familiarity with Microsoft Intune/Endpoint management and device compliance concepts* Background in financial services, insurance, healthcare, or similarly regulated industries* Familiarity with Zero Trust and modern workplace security patterns* Microsoft Certifications (not required): MS-102, SC-300, or equivalent* Experience with tenant-to-tenant consolidation, or large-scale migrations (email, Teams, SharePoint/OneDrive)## ## Core Competencies* Customer Service: Exceptional attitude and passion for providing outstanding service to internal customers* Attention to Detail: Thoroughness in accomplishing tasks; monitors and checks work; plans and organizes time and resources efficiently* Analytical Skills: Collects and researches data; designs workflows and procedures; identifies data relationships and dependencies* Communication: Strong listening and comprehension; expresses ideas clearly in verbal and written form; keeps others adequately informed* Problem Solving: Solves issues efficiently and quickly; evaluates options and escalates appropriately* Relationship Management: Manages interactions to service and support the organization; establishes credibility with all interactions* Teamwork: Contributes to positive team spirit; exhibits objectivity and openness to others' views**Supervisory Responsibilities:** YesBase Salary Range - $145,000-$165,000