Workplace Engineer (P4) - Microsoft 365 and Entra Platform

Chemical Abstracts Service; Columbus (OH); On-site; USD 120,000 - 170,000; Full time

Job summary

Chemical Abstracts Service is seeking an experienced senior Microsoft 365 Administrator to lead platform governance, IAM, and security initiatives in an enterprise context. You will drive changes, mentor peers, and partner with security, IT, and business stakeholders to maintain compliant, reliable collaboration services.

Responsibilities include administering SharePoint Online, Teams, and OneDrive; Entra ID governance with CA and PIM; and producing governance documentation.

Qualifications

• Bachelor's degree or equivalent in IT, CS, business, or related field.
• Typically 8+ years in M365 administration, IAM, or related areas.
• Hands-on experience administering M365 services in an enterprise environment.
• Hands-on experience administering Microsoft Entra ID, including CA, PIM, and identity governance.
• Knowledge of enterprise security, governance, least privilege, and access reviews.
• Ability to create technical and governance documentation (SOPs, runbooks, etc.).
• Ability to analyze issues, exercise independent judgment, and communicate risk clearly.
• Experience mentoring engineers and contributing to team standards.

Responsibilities

• Microsoft 365 Platform Administration and Support: administer, support, and govern M365 services.
• Microsoft Entra Identity and Access Management: design, administer, govern, and secure Entra ID.
• Enterprise Security and Governance: partner to implement governance and security controls.
• Decision-Making Authority: exercise independent judgment within policy.
• Technical Leadership and Mentoring: provide guidance to engineers and admins.
• Service Configuration and Operational Support: act as SME for complex issues and escalations.
• Documentation and Knowledge Management: maintain SOPs, runbooks, and governance docs.
• Governed Change and Risk Communication: assess changes for risk and impact.
• Operational Standards and Audit Readiness: maintain repeatable ops and audit-ready controls.

Skills

M365 Administration

Identity & Access Management

Security & Governance

Documentation

Mentoring/Leadership

Communication Skills

Education

Bachelor's degree or equivalent

Tools

SharePoint Online

Microsoft Teams

OneDrive for Business

Microsoft Entra ID

Conditional Access

Privileged Identity Management

Audit & Compliance

Governance & Policy

Job description

Job Accountabilities

• Microsoft 365 Platform Administration and Support: Administer, support, and govern Microsoft 365 services including SharePoint Online, Microsoft Teams, OneDrive for Business, and related collaboration capabilities. Maintain secure and supportable configurations that enable business productivity while aligning to enterprise standards, service ownership expectations, and operational support needs.
• Microsoft Entra Identity and Access Management: Design, administer, govern, and secure Microsoft Entra ID services, including Conditional Access, Privileged Identity Management, role assignments, groups, authentication methods, enterprise applications, device identity, and identity lifecycle processes. Evaluate access requirements and implement controls that support least privilege, secure administration, and reliable user access.
• Enterprise Security and Governance: Partner with security, infrastructure, support, and business stakeholders to implement governance and security controls for Microsoft 365 and Entra services. Support privileged access governance, service hardening, access reviews, compliance alignment, exception evaluation, and risk-based decision making for identity, collaboration, and administrative capabilities.
• Decision-Making Authority: Exercise independent judgment and decision-making authority in evaluating access, risk, and governance actions within established policy and control boundaries. Decisions and recommendations influence operational standards and practices beyond the individual's own assignments; elevate only true exceptions outside defined authority.
• Technical Leadership and Mentoring: Provide technical guidance and mentoring to other engineers and administrators on Microsoft 365 and Entra practices. Contribute to team standards, operational procedures, and continuous improvement efforts that strengthen control consistency and service reliability across the platform.
• Service Configuration and Operational Support: Serve as the recognized subject matter expert for complex Microsoft 365 and Entra service issues, configuration questions, and escalations. Analyze service behavior, access conditions, role requirements, policy impacts, and user or administrator experience to recommend practical resolutions.
• Documentation and Knowledge Management: Create and maintain clear technical documentation, standard operating procedures, service ownership records, support runbooks, knowledge articles, configuration references, and governance documentation. Ensure documentation is accurate, accessible, version-aware, and usable by engineering, support, security, and management audiences.
• Governed Change and Risk Communication: Assess proposed Microsoft 365 and Entra changes for customer impact, security implications, operational readiness, and supportability. Communicate risks, dependencies, options, and recommendations in a clear and structured manner appropriate for both technical and non-technical stakeholders.
• Operational Standards and Audit Readiness: Maintain administration and governance practices that support repeatable operations, reviewability, and audit readiness. Document decision rationale, control ownership, access requirements, exception handling, and operational standards so services can be reviewed, supported, and improved over time.

Required

• Bachelor's degree in Information Technology, Computer Science, Business, or a related field, or equivalent combination of education, certifications, and professional experience.
• Typically 8+ years of related experience in Microsoft 365 administration, identity and access management, enterprise technology operations, information security support, infrastructure support, or a closely related area.
• Hands-on experience administering and supporting Microsoft 365 services such as SharePoint Online, Microsoft Teams, OneDrive for Business, and related collaboration capabilities in an enterprise environment.
• Hands-on experience administering Microsoft Entra ID, including Conditional Access, PIM, role-based access, enterprise applications, authentication methods, groups, and identity governance concepts.
• Working knowledge of enterprise security and governance practices, including least privilege, privileged access management, service hardening, audit readiness, access reviews, and configuration control, with the ability to partner with security, compliance, infrastructure, support, and business stakeholders on governance or access-related initiatives.
• Demonstrated ability to create clear technical, operational, and governance documentation, such as SOPs, knowledge articles, runbooks, configuration references, service ownership records, RACI-style documentation, access models, support workflows, and operational control documentation.
• Ability to analyze complex service, access, and governance issues, evaluate alternatives, exercise independent judgment, communicate risk and tradeoffs, and make sound recommendations and decisions within established policy, with limited supervision.
• Demonstrated experience providing technical guidance or mentoring to other engineers or administrators, and contributing to team standards or operational procedures.
• Strong written and verbal communication skills, with the ability to communicate technical concepts, governance requirements, and service impacts to technical teams, support teams, management, and business stakeholders.

Preferred

• Experience supporting Microsoft 365 or Entra ID in a regulated, audit-sensitive, or security-conscious enterprise environment.
• Familiarity with Microsoft Purview, Microsoft Defender, endpoint compliance signals, or related Microsoft security and compliance capabilities as they intersect with Microsoft 365 and Entra administration.
• Relevant Microsoft certifications in Microsoft 365 administration, identity and access management, security administration, or related Microsoft cloud technologies.
• Experience with modern endpoint management or device engineering practices, including Microsoft Intune, endpoint compliance, device lifecycle management, operating system deployment, configuration profiles, or related desktop engineering capabilities.
• Ability to develop or maintain scripts, queries, or automation to support repeatable administration, reporting, troubleshooting, configuration validation, or operational tasks.
• Demonstrated cross-functional coordination and practical continuous improvement efforts that reduce support friction, strengthen control consistency, improve documentation quality, or increase service reliability.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights notice from the Department of Labor.