Responsibilities
Exchange
Online, email security and delivery
- Manage Exchange Online, including hybrid
- Exchange, mail flow, connectors and migrations.
- Configure email security: SPF, DKIM, DMARC,
- Defender for Office 365 and anti-phishing policies.
- Own resolution of email delivery issues: bounces and NDRs, delayed or missing mail, messages wrongly sent to junk or quarantine, and inbound/outbound blocking.
- Investigate with message trace, message headers, quarantine and Exchange admin center reports.
- Monitor sender reputation and handle blocklist delisting (e.g. Microsoft, Spamhaus) and third-party mail gateway or relay issues.
- Manage DNS records for mail (MX, SPF, DKIM, DMARC, Autodiscover) and review DMARC reports to prevent spoofing and delivery failures.
Teams,
SharePoint and OneDrive
- Administer Teams, including policies, governance, Teams Phone and meeting rooms.
- Design SharePoint Online and OneDrive structure, permissions, sharing and lifecycle policies.
Security
policies, identity and compliance
- Design, implement and maintain Microsoft 365 security policies aligned to Microsoft and CIS security baselines.
- Configure Defender for Office 365 policies: Safe Links, Safe Attachments, anti-phishing, anti-spam and anti-malware.
- Enforce Conditional Access policies: MFA for all users, blocking legacy authentication, and location and device-compliance rules.
- Set external sharing, guest access and Teams/SharePoint security policies.
- Configure audit logging, alert policies and app protection policies for Outlook and Teams on mobile devices.
- Administer Entra ID: hybrid identity (Entra Connect), Conditional Access, MFA and PIM.
- Implement Microsoft Purview: data loss prevention, sensitivity labels, retention and eDiscovery.
- Monitor and improve Microsoft Secure Score and respond to security alerts.
Operations
- Automate administration and reporting with PowerShell and Microsoft Graph.
- Manage licences, service health, change management and vendor support cases.
- Keep documentation, runbooks and user guidance up to date.
Required Qualifications
- 7+ years in Microsoft infrastructure, including 5+ years administering Microsoft 365 at enterprise scale (1,000+ users).
- Proven experience leading Exchange and tenant-to-tenant migrations.
- Deep knowledge of Exchange Online, Teams, SharePoint Online and OneDrive.
- Strong Entra ID, Conditional Access and hybrid identity experience.
- Hands-on experience with Purview compliance and Defender for Office 365.
- Strong PowerShell skills, including Microsoft Graph.
- Experience leading projects, mentoring engineers and working with senior stakeholders.
- Proven track record troubleshooting complex email delivery issues using message trace, headers, NDR codes and DNS mail records.
- Hands-on experience designing and implementing Microsoft 365 security policies (Defender for Office 365, Conditional Access, sharing and audit policies) in an enterprise tenant.
Preferred Qualifications
Area Certification
Microsoft 365
MS-102
Microsoft 365 Administrator Expert
Teams
MS-700
Teams Administrator
Identity
SC-300
Identity and Access Administrator
Security / compliance
SC-401
Information Security Administrator, or SC-200
