Lead Systems Engineer - Azure / Active Directory / Microsoft 365
Job Description
Job Summary
We are seeking a highly skilled Lead Analyst to manage and optimize our Active Directory, Azure, Microsoft 365, and messaging environments. This role requires deep expertise in hybrid infrastructure, including both on-premises and cloud-based technologies.
The ideal candidate will bring strong experience across Active Directory, Azure, Exchange (on-prem and Online), Microsoft 365, Entra ID, Intune, and Power Platform, and will play a key role in delivering secure, scalable, and integrated solutions aligned with business objectives. This individual will also serve as a technical leader and subject matter expert for the broader team.
Key Responsibilities
Infrastructure Management & Architecture
- Design, develop, and maintain scalable architectures for Exchange (on-premises and Exchange Online)
- Lead the design, implementation, and ongoing management of Active Directory services, ensuring high availability, scalability, and security
- Architect and support Microsoft 365 services, including Teams, SharePoint Online, OneDrive, and Power Platform solutions
- Plan and execute Exchange migrations (cutover, staged, and hybrid) from on-prem to cloud
- Configure and manage Group Policy Objects (GPOs) to enforce security standards and system configurations
- Manage access and configurations within Azure services, including compute, networking, storage, and identity
Cloud, Security & Integration
- Collaborate with IAM, Security Engineering, and Compliance teams to implement best practices across Azure and AWS environments
- Administer messaging and collaboration platforms such as Microsoft Exchange, Teams, Zoom, Workspace ONE, and Intune
- Deploy and manage Microsoft Intune for endpoint management and mobile device security
- Implement automation using PowerShell, Graph API, Ansible, and other tools
- Conduct regular security assessments and audits, addressing vulnerabilities and ensuring compliance
Support & Operations
- Provide Level 3 / escalated support for complex issues related to Active Directory, Azure, and messaging platforms
- Serve as a Subject Matter Expert (SME), guiding team members in troubleshooting and resolution
- Maintain comprehensive documentation of system configurations, procedures, and best practices
- Support 24x7 on-call rotation as required
Leadership & Collaboration
- Mentor and train team members to enhance technical capabilities across AD, Azure, and messaging technologies
- Partner with business stakeholders to drive adoption of Microsoft 365 and Azure solutions
- Participate in project planning, execution, and cross-functional collaboration
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience)
- 5+ years of experience with:
- Active Directory, Azure, O365, PKI, DNS, and GPO administration
- Exchange Server (2013–2019) and Exchange Online architecture and support
- Microsoft 365 services, Azure, and Entra ID
- Hybrid environments and cloud migration strategies
- Strong experience with:
- PowerShell scripting and automation
- Microsoft Intune and mobile device management
- Power Platform (Power Apps, Power Automate)
- Windows Server (2012, 2016, 2019, 2022)
- Knowledge of authentication protocols (OAuth, SSO, MFA)
- Experience with automation tools such as Ansible and API integrations
- Solid understanding of cybersecurity principles, controls, and compliance frameworks
- Familiarity with SailPoint and CyberArk integrations (preferred)
- Excellent communication, leadership, and problem-solving skills
Preferred Certifications:
- Microsoft Certified: Azure Administrator Associate
- Microsoft Certified: Azure Solutions Architect Expert
- Microsoft 365 Certified: Enterprise Administrator Expert
Daily Responsibilities / Priorities
- Participate in project and stakeholder meetings
- Execute Intune and Exchange Online migration activities
- Support business adoption of Microsoft 365 and Azure solutions
- Manage operational work queues and act as SME for assigned technologies