Staff M365 Engineer

pennmutual; United States; On-site; USD 140,000 - 180,000; Full time

Job summary

Penn Mutual is seeking a Staff M365 Engineer to lead the Microsoft 365 platform across the enterprise. You will architect, secure, and optimize Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, and Copilot while guiding governance and compliance efforts.

This role combines hands-on engineering with strategic leadership, cross-functional collaboration, and a focus on reliability, scalability, and secure integrations across Entra ID/Azure AD and third-party systems.

Qualifications

• 10+ years of experience in enterprise collaboration or workplace engineering.
• 5+ years of deep, hands-on Microsoft 365 experience.
• Expert-level knowledge of Exchange Online, SharePoint Online/OneDrive, and Teams (including Teams Phone/voice).
• Strong expertise in Azure Entra ID, IAM, PowerShell automation, and Graph API tooling.
• Experience supporting large, regulated enterprise environments.

Responsibilities

• Design, implement, and evolve Microsoft 365 architecture for performance, security, and scalability.
• Serve as enterprise architect and escalation point for Microsoft 365 services.
• Define platform patterns, standards, and configurations across the stack.
• Collaborate with Security and Compliance teams on governance, retention, and eDiscovery.
• Plan and support migrations from Zoom to Teams.
• Design secure integrations between M365 and Entra ID/Azure AD and other systems.
• Drive reliability, monitoring, incident response, and IaC automation.
• Lead Copilot enablement, adoption strategies, and governance.
• Provide architectural guidance in design reviews and change approvals.

Skills

Enterprise collaboration

Microsoft 365

Exchange Online

SharePoint Online

OneDrive

Teams

Power Platform

Copilot

Azure AD / Entra ID

PowerShell automation

Microsoft Graph API

Security governance

Tools

PowerShell

Microsoft Graph API

Intune

Azure AD

Job description

Job Description

At Penn Mutual, we're seeking a Staff M365 Engineer who is passionate about shaping and supporting the modern workplace experience. In this role, you'll serve as a senior technical leader responsible for the architecture, engineering, security, and reliability of our Microsoft 365 ecosystem across the enterprise.

As the technical authority for M365 platforms including Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, and Copilot, you'll help ensure our environment remains secure, scalable, resilient, and aligned with business productivity goals. This position combines deep hands-on expertise, architectural leadership, and cross-functional collaboration to drive innovation and enablement across the organization, while maintaining strong governance, security, and compliance standards.

Key Responsibilities

Microsoft 365 Platform Architecture & Engineering: Serve as enterprise architect and escalation point for Microsoft 365 services. Design, implement, and evolve M365 architecture including Exchange Online, Microsoft Teams (voice, meetings, collaboration), SharePoint Online & OneDrive, Power Platform (Power Automate, Power Apps), and M365 Copilot. Define platform patterns, standards, and configurations for performance, security, and scalability.

Security, Compliance & Governance: Collaborate with Security and Compliance teams to ensure Microsoft 365 aligns with identity and conditional access policies, Data Loss Prevention (DLP), Information Protection, retention, eDiscovery, Microsoft Purview (sensitivity labels, retention policies), and Microsoft Defender for Office 365. Implement and maintain governance for external sharing and guest access, and privileged access (PIM/RBAC). Support audits and regulatory requirements.

Plan, implement and support the migration from Zoom to Teams.

Identity, Access & Integration: Design secure integrations between M365 and Entra ID/Azure AD, IAM solutions (SSO, MFA, Conditional Access), and third-party SaaS and enterprise systems. Define identity and access models for users, service accounts, and automation. Deliver seamless and secure user experiences across devices and locations.

Automation, Reliability & Operations: Drive platform reliability and operational excellence through monitoring, logging, alerting, incident response, and root cause analysis. Automate provisioning, configuration, and lifecycle management using PowerShell, Power Platform, and Infrastructure-as-Code patterns. Advance SRE and ITSM practices. Manage Microsoft 365 service health, own change and release practices, and maintain platform documentation and runbooks.

Copilot & Modern Workplace Enablement: Lead secure enablement of M365 Copilot and collaboration and productivity experiences. Coordinate with Product, L&D, and business teams to deliver adoption strategies and guardrails. Define extensibility patterns for Copilot plugins, integrations and prompts.

Leadership & Influence: Act as technical mentor to engineers and administrators. Provide architectural guidance in design reviews and change approvals. Influence roadmap decisions with vendors and internal stakeholders. Translate technical decisions into clear business outcomes.

Minimum Qualifications

• 10+ years of experience in enterprise collaboration or workplace engineering
• 5+ years of deep, hands-on Microsoft 365 experience
• Expert-level knowledge of Exchange Online, SharePoint Online/OneDrive, and Microsoft Teams (including Teams Phone/voice; Direct Routing preferred)
• Strong expertise in Microsoft Entra ID (Azure AD), Identity and access management, PowerShell automation, and Microsoft Graph API and automation tooling
• Proven experience supporting large, regulated enterprise environments

Required Technical Skills & Knowledge

• Core Workloads: Exchange Online, Teams (including Teams Phone), SharePoint Online/OneDrive
• Power Platform: Power Automate/Power Apps, DLP, environment governance
• Copilot: Microsoft 365 Copilot readiness, governance, adoption, extensibility
• Migrations: Tenant-to-tenant consolidation (identity, mail, Teams, SharePoint/OneDrive)
• Security & Compliance: Purview (labels/retention/eDiscovery), Defender for Office 365
• Identity: Entra ID/Azure AD (Conditional Access, MFA, PIM, RBAC)
• Automation & Operations: PowerShell, Microsoft Graph, monitoring/incident/change management
• Endpoint: Intune/MDM/MAM concepts and device compliance

Preferred Qualifications

• Experience enabling and governing M365 Copilot and Power Platform at scale
• Familiarity with Microsoft Intune/Endpoint management and device compliance concepts
• Background in financial services, insurance, healthcare, or similarly regulated industries
• Familiarity with Zero Trust and modern workplace security patterns
• Microsoft Certifications (not required): MS-102, SC-300, or equivalent
• Experience with tenant-to-tenant consolidation, or large-scale migrations (email, Teams, SharePoint/OneDrive)

Core Competencies

• Customer Service: Exceptional attitud