Microsoft 365 Engineer

Key Responsibilities

• Design and maintain enterprise architecture for Microsoft Office 365 and related services (Exchange SharePoint Teams OneDrive etc.).
• Lead modernization initiatives and define future-state roadmaps aligned with business goals.
• Evaluate and implement new Microsoft features and services ensuring architectural alignment.
• Implement and manage advanced security configurations (DLP MIP ATP Conditional Access).
• Collaborate with InfoSec to ensure compliance with internal policies and regulatory standards.
• Define and enforce governance policies for data retention access control and compliance.
• Manage and optimize Microsoft licensing models (E3 E5 etc.) for cost-effective usage.
• Provide insights on license tiering renewals audits and vendor negotiations.
• Ensure seamless integration with: Digital Guardian (DLP) DNS filtering and firewall appliances VPN and remote access solutions identity providers (e.g. OKTA Azure AD) and other enterprise-grade security and monitoring tools
• Troubleshoot and optimize cross-platform workflows and data flows.
• Serve as the final escalation point for complex Microsoft Office issues.
• Lead root cause analysis and post-mortem reviews for major incidents.
• Mentor Tier 1 and Tier 2 engineers and contribute to knowledge base development.
• Evaluate emerging Microsoft technologies and lead proof-of-concept initiatives.
• Represent the Office platform in enterprise architecture boards and steering committees.
• Provide strategic input on digital workplace transformation initiatives.
• Design and implement real-time monitoring strategies for Microsoft Office 365 services and integrations.
• Leverage Microsoft-native tools (e.g. Microsoft Defender Sentinel Purview and Log Analytics) and third-party platforms to collect telemetry and performance data.
• Develop and maintain dashboards and alerting mechanisms to proactively detect anomalies performance degradation and security threats.
• Collaborate with Security Operations and NOC teams to ensure timely incident response and continuous service health visibility.
• Define SLAs and KPIs for platform reliability and drive improvements through data-driven insights.

Qualifications

8 years of experience in enterprise IT with 5 years focused on Microsoft Office 365 architecture and engineering.

Deep knowledge of Microsoft 365 security compliance and governance features.

Experience with enterprise identity and access management (OKTA Azure AD).

Strong understanding of network security principles (DNS firewalls VPNs).

Familiarity with DLP tools such as Digital Guardian.

Microsoft certifications (e.g. MS-101 MS-500 AZ-305 SC-300) strongly preferred.

Excellent communication documentation and stakeholder engagement skills.

Preferred Attributes

Strategic thinker with a passion for innovation and continuous improvement.

Proven ability to lead cross-functional initiatives and influence stakeholders.

Experience in regulated industries (finance healthcare government) is a plus.

Familiarity with scripting and automation (Python PowerShell Graph API). Experience modernizing manual deployments over to GitHub and Infrastructure as Code Pipeline Deployment Automation solutions.

Experience with Zero Trust architecture and conditional access policies.

Special Factors

Sponsorship

About Vanguard

At Vanguard we dont just have a missionwere on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members designed to capture the benefits of enhanced flexibility while enabling in-person learning collaboration and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.