Microsoft M365 Specialist - L3

Skills:

Microsoft Entra , Microsoft 365 administration, Microsoft Intune, Exchange Online, Identity & Access Management, Security & Compliance, Endpoint & Device Management, Group Policy (GPO) & Domain Management,

The  Microsoft M365 Specialist  is responsible for managing, implementing, and optimizing Microsoft 365 (M365) solutions, including Office 365, Teams, SharePoint, One Drive, and related services. This role involves supporting users, ensuring security compliance, managing migrations, and optimizing M365 applications to improve productivity and collaboration across the organization. The ideal candidate to have deep expertise in Microsoft 365 administration, security, automation, and governance, along with experience in IT compliance frameworks.

Key Responsibilities

Identity & Access Management (IAM):

Manage Active Directory (Hybrid) and Microsoft Entra  Entra .

Implement and maintain Multi-Factor Authentication (MFA) and conditional access polices and password-less sign-in solutions.

Configure and manage Intune for device and application management.

Ensure compliance with Zero Trust security models and identity protection policies.

Manage authentication methods including certificate-based authentication (CBA), Windows Hello for Business (WHfB), FIDO2 keys, and conditional access policies..

Security & Compliance

Enforce Zero Trust principles across identity, devices, and networks.

Implement identity governance policies (Privileged Identity Management - PIM, Conditional Access, Role-Based Access Control - RBAC).

Monitor and enhance security controls for authentication and access management.

Configure AD FS and AD CS to support secure authentication.

Perform security audits, policy reviews, and compliance checks.

Endpoint & Device Management With Intune

Configure Microsoft Intune for endpoint security MDM and MAM, compliance, and conditional access.

Implement Bit Locker encryption, device compliance policies, and autopilot deployment.

Manage identity and endpoint security in hybrid environments.

Group Policy (GPO) & Domain Management

Design and implement GPO policies to manage user authentication, security baselines, and device configurations.

Manage domain services, DNS settings, and trust relationships between on-premises and cloud identity.

Troubleshoot authentication, SSO, and directory sync issues.

Technical Support & Documentation

Provide technical leadership and support for IAM-related incidents.

Document IAM policies, configurations, and best practices.

Collaborate with security, compliance, and infrastructure teams to align IAM strategies with organizational goals.

Migrations & Upgrades

Lead or assist with migrations from legacy systems to Microsoft 365, including Exchange, SharePoint, and One Drive.

Provide technical guidance and execute hybrid or full-cloud migration projects.

Evaluate and implement new Microsoft 365 features and updates to improve business productivity.

Training & Documentation

Create and maintain technical documentation, SOPs, and user guides.

Support change management initiatives related to M365 implementations.

Technical Skills

Required

Qualifications & Skills:

Strong expertise in Microsoft 365 administration, including Exchange Online, Intune, SharePoint Online, Microsoft Teams, One Drive,

Hands-on experience with Microsoft Entra  identity and access management.

Knowledge of security policies, threat protection, and compliance settings in Microsoft Defender and Microsoft Purview.

Experience with Power Shell scripting for M365 automation and administration would be an added advantage

Familiarity with Microsoft Endpoint Manager (Intune) for device and application management.

Understanding of hybrid deployments (Exchange Hybrid,) and migration strategies.

Soft Skills

Strong problem-solving and analytical skills.

Excellent communication and collaboration abilities.

Ability to work independently and manage multiple tasks effectively.

Customer service mindset with a focus on user experience and adoption.

Preferred Qualifications

Microsoft Certified :
Microsoft 365 Administrator Expert (Exams MS-102) is mandatory

Microsoft Certified :
Identity and Access Administrator Associate (Exam SC-300) is good to have

Microsoft Certified :
Security, Compliance, and Identity Fundamentals (Exam SC-900) is good to have

Experience:

Total 12+ years and 5+ years in IT administration, with at least 3 years focused on Microsoft 365 suite.

Industry

Experience:

Background of IT services and working in a complex IT Enterprise environments is a must.