Systems Engineer M365

Educational Federal Credit Union; Miami (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Educational Federal Credit Union in Miami seeks an IT Infrastructure specialist to administer Microsoft 365 services, enforce security controls, and manage hybrid identity across cloud and on-prem environments.

You will collaborate with IT Security, perform patching, incident responses, and drive automation using PowerShell and Graph API, while supporting regulatory compliance.

This role participates in maintenance windows, on-call rotations, and documentation of runbooks and procedures.

Responsibilities

• Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance.
• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.
• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.
• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.
• Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).
• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.
• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.
• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.
• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).
• Collaborate with IT Security on Sentinel alerting, automation, and tuning.
• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.
• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.
• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.
• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.
• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.
• Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support.
• Troubleshoot voice quality and connectivity issues across sites.
• Assist with basic network troubleshooting and hybrid connectivity components.
• Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control.
• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.
• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.
• Monitor systems and networks to proactively address alerts and performance issues.
• Use AI powered tools to enhance productivity and operational efficiency.
• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.
• Maintain runbooks, configuration guides, and knowledge base documentation.
• Complete or participate in additional duties or projects as assigned by management

Job description

• Administer Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) including user lifecycle, licensing, permissions, mail flow, and governance.
• Manage email security platforms (Proofpoint, Microsoft Defender), authentication standards (DMARC/DKIM/SPF), and DLP/anti phishing controls.
• Monitor service health, manage incidents, coordinate escalations, and execute migrations, feature rollouts, and tenant configuration changes.
• Support Microsoft 365 Copilot enablement including licensing, policy configuration, data governance, and adoption.
• Administer Microsoft Entra ID including conditional access, SSO integrations, app registrations, authentication methods, and hybrid identity (Azure AD Connect/Cloud Sync).
• Maintain and harden on premises Active Directory including replication, Sites & Services, OU delegation, and security benchmarks.
• Manage Intune for MDM/MAM, Autopilot, configuration/compliance profiles, and Defender for Endpoint.
• Implement MFA, passwordless authentication, PIM, and enforce endpoint security baselines across all device platforms.
• Administer Microsoft Defender XDR components and Microsoft Purview (DLP, sensitivity labels, retention, information barriers).
• Collaborate with IT Security on Sentinel alerting, automation, and tuning.
• Support regulatory compliance (NCUA, FFIEC, GLBA) through configuration, evidence collection, access reviews, and audit preparation.
• Perform security patching, vulnerability scanning support, incident response participation, and documentation for audits.
• Manage Hyper V virtualization, server provisioning, patching, hardening, and lifecycle management.
• Maintain SAN/NAS storage, enterprise backups, and disaster recovery testing.
• Support Azure networking, VPN connectivity, VLAN verification, and firewall rule coordination.
• Administer RingCentral UCaaS including provisioning, call routing, IVR, and device support.
• Troubleshoot voice quality and connectivity issues across sites.
• Assist with basic network troubleshooting and hybrid connectivity components.
• Develop automation using PowerShell, Graph API/SDK, and Power Automate; maintain scripts in version control.
• Support change management, user adoption, and evaluation of new Microsoft features and security best practices.
• Serve as Tier 2/3 escalation for infrastructure issues and maintain accurate ticketing and documentation.
• Monitor systems and networks to proactively address alerts and performance issues.
• Use AI powered tools to enhance productivity and operational efficiency.
• Participate in maintenance windows, on call rotation, vendor collaboration, and cross training within the IT Infrastructure team.
• Maintain runbooks, configuration guides, and knowledge base documentation.
• Complete or participate in additional duties or projects as assigned by management