Senior Azure and Office 365 Engineer

Job Description
Contract to Hire
Hybrid -Downtown Manhattan ( 3 days onsite/2 days remote)

Someone should be expert in all Microsoft Products like O365 Exchange OneDrive Copilot Entra ID etc.



Job Title: Senior Azure andOffice 365Engineer Location: Downtown ManhattanNYC/ Hybrid (2 days remote & 3 days onsite / week)


Role Overview
We are looking for an experiencedSenior Azure andOffice 365Engineerto lead the design implementation and governance of Microsoft 365 and Azure services with a specialized focus onExchange Onlineand cloud-based identity and security solutions.
This senior-level role will drive architecture decisions enforce best practices and support enterprise-scale collaboration and messaging systems. The ideal candidate will bring deep knowledge inExchange OnlineEntra IDOneDrivesecurity & compliance andhybrid infrastructure while also contributing to broader system and network initiatives across Azure and AWS.
Role Expectations
Lead the architecture implementation and lifecycle management of Exchange Online:
Design and maintain hybrid Exchange configurations
Manage mail flow transport rules spam/phishing protection connectors
Administer mailboxes archive policies retention shared mailboxes and delegate access
Perform advanced troubleshooting (NDRs mail routing M365 admin logs)
Develop Exchange Online PowerShell scripts for automation auditing and reporting
Own the design and management ofMicrosoft 365 tenant configuration including:
OneDrive for Business architecture GPO integration sync health and lifecycle management
Security and Compliance features: DLP retention eDiscovery and Microsoft Purview
Collaboration governance across Teams SharePoint and OneDrive
Administer and enhanceMicrosoft Entra ID (Azure AD) including:
Conditional Access MFA PIM Identity Protection
Federation and SSO integration with internal and external applications (OAuth SAML)
Act as escalation forWindows ServerActive DirectoryDNSDHCP andPKI
Lead or assist in cloud-focused projects such asM365 tenant hardeningdomain migrationshybrid identity anddata governance
Support foundationalAzure IaaSinfrastructure (VMs storage networking) and Entra ID integrations
Provide expert-level guidance onincident resolutionroot cause analysis andperformance tuning
Drive automation initiatives usingPowerShell Azure CLI and scripting for routine tasks and reporting
Maintain secure and compliant infrastructure configurations aligned with CIS/NIST frameworks
Overseecertificates and PKIenvironments including internal CA and public SSL/TLS lifecycle management
Ensureenterprise-grade backup and recoveryreadiness for Exchange Online Entra ID and key cloud systems
Mentor junior engineers and provide architectural input for cross-functional cloud and messaging projects
Skills & Knowledge
Expert-level experience withExchange Online including:
Mail routing connectors hybrid setups message tracing journaling retention litigation hold
Mailbox migrations license management and throttling resolution
Deep knowledge ofMicrosoft 365services architecture including SharePoint Online Teams and OneDrive
Strong understanding ofMicrosoft Entra ID (Azure AD):
Conditional Access Identity Protection MFA role-based access group automation
Solid experience withPowerShell Graph API or other automation tools forO365administration
Advanced skills inActive Directory including domain trust GPO DNS and hybrid identity models
Proven experience withMicrosoft Defender forOffice 365 security baselines and anti-phishing policies
Familiarity withIntune/MEMfor policy deployment related to M365 services and endpoint compliance
Hands-on experience withPKI CA configuration certificate lifecycle and secure authentication
Strong troubleshooting skills inemail deliverySPF/DKIM/DMARC hybrid mail transport and user access issues

Additional or Preferred Qualifications
Experience inAWS (Amazon Web Services) including:
EC2VPCRoute 53IAMCloudWatch andWindows administration in AWS
Working knowledge ofVMwarevirtualization and virtual networking
Microsoft Certifications strongly preferred:
MS-102: Microsoft 365 Administrator
AZ-104: Azure Administrator
AZ-305: Azure Solutions Architect (bonus)
SC-300: Identity and Access Administrator
Exchange Online-focused certificationsor legacy MCSE/MCSA a strong plus
Understanding ofZero Trust architecturecompliance frameworks(HIPAA ISO 27001) and data protection strategies

Required Skills:

SAMLOAUTHSHAREPOINTSCRIPTINGNETWORKINGAZUREAZURE SERVICESAWS