The Role
We're looking for a hands-on Microsoft 365 Systems Administrator to own day-to-day management of our cloud environment across RBMG and its affiliates. You'll keep our tenant secure, well maintained and easy to use, and support a remote, bring-your-own-device (BYOD) workforce. You'll also be the primary point of contact for our managed service provider on escalations and project work.
This is a builder role in a growing organization. You'll shape standards, not just follow them.
What You'll Do
- Tenant administration: Manage Exchange Online, Teams, OneDrive and SharePoint, including user onboarding and offboarding, licensing, groups, mailboxes, shared resources and retention settings.
- Identity and access: Administer Microsoft Entra ID, including conditional access, MFA, role-based access and privileged access through Privileged Identity Management (PIM). Follow approval workflows for high-risk changes.
- Security and compliance: Configure and monitor Microsoft Defender, Purview (DLP, sensitivity labels, retention) and Secure Score. Respond to alerts, support incident response, and implement security and compliance requirements in partnership with Risk Management.
- BYOD device and app management: Use Microsoft Intune to protect company data on personal devices, primarily through app protection policies (MAM) rather than full device enrollment, respecting employee privacy while keeping data secure.
- System maintenance: Manage service health, change rollouts, Microsoft roadmap updates, backups, documentation and configuration baselines to keep the environment clean and auditable.
- End user support: Provide responsive, friendly Tier 1–2 support through our Teams-integrated ticketing, and create how-to guides that help colleagues get the most out of Microsoft 365.
- Vendor coordination: Serve as the main liaison with our MSP for escalations, after-hours coverage and project work. Review vendor changes and hold them to agreed standards.
- Multi-entity support: Support users and configurations for several affiliated companies within a shared tenant, keeping access, data and branding properly separated.
What We're Looking For
- 3–5+ years administering Microsoft 365 in a cloud-first environment
- Strong working knowledge of Exchange Online, Teams, OneDrive/SharePoint, Entra ID and Intune
- Experience securing BYOD or remote workforces, including conditional access and app protection policies
- Familiarity with Defender and Purview, and with security frameworks or audit support
- PowerShell scripting for Microsoft 365 administration and automation
- Clear communication with non-technical users and a service-first attitude
- Comfort working independently on a small, remote team
Nice to Have
- Microsoft certifications such as MS-102 (Microsoft 365 Administrator Expert), SC-300 or MD-102
- Experience in healthcare or another regulated environment (HIPAA awareness a plus)
- Experience managing a multi-entity or multi-brand tenant
- Experience working alongside a managed service provider