Systems Engineer I

Educational Federal Credit Union; Miami (FL); On-site; USD 70,000 - 95,000; Full time

Benefits offered by this job

Paid Holidays

Paid Vacation

Medical Insurance

401K matching

Tuition reimbursement

Job summary

EdFed Credit Union is seeking a Systems Engineer I – M365 to join the IT Infrastructure Team in South Florida. The role balances 50/50 between M365/cloud duties and shared infrastructure responsibilities, covering Exchange Online, Entra ID, Intune, Defender, and on-prem AD.

You will contribute to security, migrations, and disaster recovery planning. The ideal candidate will have 5–7 years in IT, an associate degree, strong scripting, and a collaborative mindset to support a diverse technology

Qualifications

• Associate's degree or equivalent combination.
• 5-7 years of experience in systems engineering or M365 administration.
• Hands-on experience with Exchange Online, SharePoint, Teams, and OneDrive.
• Knowledge of Entra ID, conditional access, and hybrid identity.
• Proficient in PowerShell and Graph API for automation.

Responsibilities

• Administer Microsoft 365: Exchange, SharePoint, Teams, OneDrive, licensing.
• Configure and manage email security (Proofpoint, Defender) and DMARC/DKIM/SPF.
• Monitor service health, coordinate escalations, migrations, and tenant changes.
• Administer Entra ID and Intune for device management and security.
• Develop automation scripts and maintain runbooks.

Skills

M365 administration

Azure AD

Intune

PowerShell scripting

Security & compliance

Hybrid identity

Education

Associate's degree

Tools

Proofpoint

Microsoft Defender

Graph API / Graph PowerShell SDK

Hyper-V

Active Directory

Job description

Job Description

** Job Summary:**

The Systems Engineer I – M365 is a mid-level position within EdFed Credit Union’s IT Infrastructure Team, with a primary specialty in Microsoft 365, Azure cloud services, identity management, and endpoint administration. This role is responsible for administering the M365 tenant, Entra ID, Intune, and the Microsoft security and compliance stack while contributing equally to shared team responsibilities spanning servers, networking, unified communications, and security operations. The position is structured as a 50/50 split between M365/cloud specialty duties and shared IT Infrastructure Team responsibilities, ensuring cross-functional coverage and operational resilience across all infrastructure domains.

** Duties & Responsibilities:**

• Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance.
• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.
• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.
• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.
• Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).
• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.
• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.
• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.
• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).
• Collaborate with IT Security on Sentinel alerting, automation, and tuning.
• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.
• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.
• Administer Windows Server environments (AD, DNS, DHCP, Group Policy, file/print services).
• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.
• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.
• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.
• Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support.
• Troubleshoot voice quality and connectivity issues across sites.
• Assist with basic network troubleshooting and hybrid connectivity components.
• Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control.
• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.
• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.
• Monitor systems and networks to proactively address alerts and performance issues.
• Use AI powered tools to enhance productivity and operational efficiency.
• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.
• Maintain runbooks, configuration guides, and knowledge base documentation.
• Complete or participate in additional duties or projects as assigned by management.

** Requirements:**

• ****** Associate's degree or equivalent combination
• 5-7 years of experience in systems engineering, M365 administration, cloud operations, or a related IT role.

** Job Qualifications & Specifications:**

• Strong hands-on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive).
• Working knowledge of Microsoft Entra ID (Azure AD), conditional access, hybrid identity (Azure AD Connect), and SSO protocols (SAML, OAuth/OIDC).
• Experience configuring and managing Microsoft Intune for device enrollment, compliance, application deployment, and Autopilot.
• Experience with email security administration including DMARC, DKIM, SPF, and secure mail gateway management (Proofpoint or equivalent).
• Familiarity with Active Directory administration including replication, Group Policy, and CIS benchmark hardening.
• Proficiency in PowerShell scripting and Microsoft Graph API / Graph PowerShell SDK for automation and reporting.
• Hands-on experience with Windows Server administration (2016/2019/2022), Microsoft Hyper-V, DNS, DHCP, and basic networking concepts.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to participate in on-call rotation and after-hours maintenance as needed.

_ ** **Every employee is required to comply with all Bank Secrecy Act (BSA) policies and procedures, and to attend required BSA-related training as assigned._

** The following are some benefits offered to employees:**

• Paid Holiday
• Paid Birthday
• Paid Sick and Personal Days
• Paid Vacation
• Retirement/401K with matching contributions
• Medical, Dental and Vision Insurance
• Life Insurance and Long Term Disability
• Tuition reimbursement for Undergraduate and Graduate courses
• Various Incentive Programs
• Career opportunities

** About Us:**

As a financial institution, EdFed has been dedicated to providing our members, the South Florida educational community, with quality financial services since 1935. As an employer, we strive to provide staff with challenging career opportunities, great benefits, and a friendly work environment. Confidentiality is of the utmost importance in this position.

Company Description

As a financial institution, EdFed has been dedicated to providing our members, the South Florida educational community, with quality financial services since 1935. As an employer, we strive to provide staff with challenging career opportunities, great benefits, and a friendly work environment. Confidentiality is of the utmost importance in this position.