Systems Engineer I - M365

Educational Federal Credit Union; Miami (FL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

401K with company match

Paid Holidays and Vacation

Job summary

Educational Federal Credit Union in Miami seeks a Systems Engineer I – M365 to join its IT Infrastructure Team. The role centers on Microsoft 365, Entra ID, Intune, and Defender, with shared duties across servers, networking, UCaaS, and security operations.

The engineer will manage M365 tenant configuration, Entra ID, Intune, and Defender stack while contributing to on‑prem AD, hybrid identity, and security initiatives. Expect on‑call duty and collaboration across teams.

Qualifications

• Experience administering Microsoft 365 services (Exchange Online, SharePoint, Teams, OneDrive).
• Knowledge of Entra ID, conditional access, and hybrid identity.
• Proficient with PowerShell scripting and Graph API for automation.

Responsibilities

• Administer M365 tenant, license management, and governance.
• Manage email security and phishing controls.
• Monitor, incident response, and migrations.
• Support M365 Copilot enablement.
• Maintain on-prem Active Directory and hybrid identity.

Skills

M365 Administration

Entra ID

Intune

PowerShell scripting

Graph API

Microsoft Defender

Email security

Hybrid identity

Active Directory

RingCentral UCaaS

Automation tooling

Education

Associate's degree

Tools

Proofpoint

Microsoft Defender

Azure AD Connect

Hyper-V

Graph PowerShell SDK

Job description

The Systems Engineer I – M365 is a mid-level position within EdFed Credit Union’s IT Infrastructure Team, with a primary specialty in Microsoft 365, Azure cloud services, identity management, and endpoint administration. This role is responsible for administering the M365 tenant, Entra ID, Intune, and the Microsoft security and compliance stack while contributing equally to shared team responsibilities spanning servers, networking, unified communications, and security operations. The position is structured as a 50/50 split between M365/cloud specialty duties and shared IT Infrastructure Team responsibilities, ensuring cross‑functional coverage and operational resilience across all infrastructure domains.

Duties & Responsibilities:

• Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance.
• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.
• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.
• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.
• Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).
• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.
• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.
• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.
• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).
• Collaborate with IT Security on Sentinel alerting, automation, and tuning.
• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.
• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.
• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.
• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.
• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.
• Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support.
• Troubleshoot voice quality and connectivity issues across sites.
• Assist with basic network troubleshooting and hybrid connectivity components.
• Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control.
• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.
• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.
• Monitor systems and networks to proactively address alerts and performance issues.
• Use AI powered tools to enhance productivity and operational efficiency.
• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.
• Maintain runbooks, configuration guides, and knowledge base documentation.
• Complete or participate in additional duties or projects as assigned by management.

Requirements:

• Associate's degree or equivalent combination
• 5-7 years of experience in systems engineering, M365 administration, cloud operations, or a related IT role

Job Qualifications & Specifications:

• Strong hands‑on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive).
• Working knowledge of Microsoft Entra ID (Azure AD), conditional access, hybrid identity (Azure AD Connect), and SSO protocols (SAML, OAuth/OIDC).
• Experience configuring and managing Microsoft Intune for device enrollment, compliance, application deployment, and Autopilot.
• Experience with email security administration including DMARC, DKIM, SPF, and secure mail gateway management (Proofpoint or equivalent).
• Familiarity with Active Directory administration including replication, Group Policy, and CIS benchmark hardening.
• Proficiency in PowerShell scripting and Microsoft Graph API / Graph PowerShell SDK for automation and reporting.
• Hands‑on experience with Windows Server administration (2016/2019/2022), Microsoft Hyper‑V, DNS, DHCP, and basic networking concepts.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to participate in on‑call rotation and after‑hours maintenance as needed.

Every employee is required to comply with all Bank Secrecy Act (BSA) policies and procedures, and to attend required BSA‑related training as assigned.

Benefits Offered:

• Paid Holiday
• Paid Birthday
• Paid Sick and Personal Days
• Paid Vacation
• Retirement/401K with matching contributions
• Medical, Dental and Vision Insurance
• Life Insurance and Long Term Disability
• Tuition reimbursement for Undergraduate and Graduate courses
• Career opportunities

About Us:

As a financial institution, EdFed has been dedicated to providing our members, the South Florida educational community, with quality financial services since 1935. As an employer, we strive to provide staff with challenging career opportunities, great benefits, and a friendly work environment. Confidentiality is of the utmost importance in this position.