Systems Engineer I - M365

Educational Federal Credit Union; Town of Florida (NY); On-site; USD 85,000 - 120,000; Full time

Job summary

EdFed Credit Union is seeking a Systems Engineer I – M365 to join the IT Infrastructure Team. The role focuses on administering Microsoft 365, Entra ID, Intune, and the security stack while sharing responsibilities across servers, networking, UCaaS, and security operations.

The candidate will contribute to governance, licensing, passwordless authentication, and hybrid identity initiatives, ensuring resilient operations and cross-functional coverage across the environment.

Qualifications

• Strong experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive).
• Experience with Entra ID, conditional access, hybrid identity solutions.
• Familiarity with Intune device enrollment, compliance, Autopilot, and deployment.
• Knowledge of email security, DMARC/DKIM/SPF, and DLP controls.
• Experience implementing security and compliance features across Microsoft security stack.

Responsibilities

• Administer M365 tenant, licensing, permissions, mail flow, and governance.
• Maintain and configure Entra ID, conditional access, and hybrid identity integrations.
• Support security, compliance, and incident response activities within the cloud platform.
• Collaborate with IT teams to maintain on‑prem AD, servers, networking, and UCaaS services.

Skills

M365 admin

Azure cloud

Identity mgmt

Intune

PowerShell

Graph API

Education

Associate's degree

Tools

Proofpoint

Microsoft Defender

Intune

Azure AD Connect

Job description

Job Description

Job Summary:

The Systems Engineer I – M365 is a mid-level position within EdFed Credit Union’s IT Infrastructure Team, with a primary specialty in Microsoft 365, Azure cloud services, identity management, and endpoint administration. This role is responsible for administering the M365 tenant, Entra ID, Intune, and the Microsoft security and compliance stack while contributing equally to shared team responsibilities spanning servers, networking, unified communications, and security operations. The position is structured as a 50/50 split between M365/cloud specialty duties and shared IT Infrastructure Team responsibilities, ensuring cross-functional coverage and operational resilience across all infrastructure domains.

Duties & Responsibilities:

• Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance.


• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.


• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.


• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.


• Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).


• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.


• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.


• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.


• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).


• Collaborate with IT Security on Sentinel alerting, automation, and tuning.


• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.


• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.


• Administer Windows Server environments (AD, DNS, DHCP, Group Policy, file/print services).


• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.


• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.


• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.


• Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support.


• Troubleshoot voice quality and connectivity issues across sites.


• Assist with basic network troubleshooting and hybrid connectivity components.


• Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control.


• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.


• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.


• Monitor systems and networks to proactively address alerts and performance issues.


• Use AI powered tools to enhance productivity and operational efficiency.


• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.


• Maintain runbooks, configuration guides, and knowledge base documentation.


• Complete or participate in additional duties or projects as assigned by management.

Requirements:

• Associate's degree or equivalent combination


• 5-7 years of experience in systems engineering, M365 administration, cloud operations, or a related IT role.

Job Qualifications & Specifications:

• Strong hands‑on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive).


• Working knowledge of Microsoft Entra ID (Azure AD), conditional access, hybrid identity (Azure AD Connect), and SSO protocols (SAML, OAuth/OIDC).


• Experience configuring and managing Microsoft Intune for device enrollment, compliance, application deployment, and Autopilot.


• Experience with email security administration including DMARC, DKIM, SPF, and secure mail gateway management (Proofpoint or equivalent).