Key Responsibilities Identity & Access (Entra ID) • Administer Entra ID: user and group lifecycle, enterprise app registrations, SSO integrations, and hybrid identity sync • Implement and maintain conditional access policies, MFA enforcement, and device compliance requirements • Operate privileged identity management (PIM) workflows; maintain access review cadence and evidence • Support device compliance remediation across the endpoint fleet, including admin-portal access hardening Microsoft 365 & Endpoint • Administer Exchange Online, SharePoint/OneDrive, and Teams (including Teams telephony readiness) • Manage Intune: enrollment, configuration profiles, compliance policies, application deployment, and patch rings • Support the TLCx Hub SharePoint environment and Viva Learning integrations Azure Infrastructure • Build and operate Azure IaaS/PaaS resources per US-defined architecture: networking, compute, storage, backup • Implement Azure Monitor, cost management hygiene, and tagging standards • Execute migration runbooks for on-premises workloads moving to Azure Required Qualifications • 4-8 years administering Microsoft 365 and Entra ID in enterprise environments (1,000+ seats preferred) • Production experience with conditional access, Intune device management, and hybrid identity • Hands-on Azure infrastructure experience (compute, networking, storage, backup/DR) • PowerShell proficiency for administration at scale; Microsoft Graph experience preferred • MS-102, AZ-104, or SC-300 certification (at least one required) • Strong written and spoken English Preferred • Experience in BPO or managed services environments with client-driven security requirements • Exposure to Power Platform governance (Power Automate, Copilot Studio) • Experience supporting compliance frameworks (SOC 2, HIPAA, PCI-DSS)