Modern Workplace Engineer III

The Modern Workplace Engineer Level III supports Microsoft 365 environments for managed services customers. This role will lead the design, optimization, and security of Microsoft 365 E5 environments for clients primarily in the Defense Industrial Base. This senior technical role will architect complex collaboration and security solutions, mentor junior staff, and directly support customer compliance and productivity goals in tightly regulated environments.

This role will focus on both the ongoing operations of managed services as well as project-based onboarding and adoption.

Role & Responsibilities:

Architecture & Deployment

• Design and implement secure, scalable Microsoft 365 configurations including:

• SharePoint Online site collections and permissions
• Microsoft Teams structures, templates, and lifecycle policies
• Exchange Online transport rules, shared mailboxes, and mail flow
• One Drive for Business policies and sharing controls

• Deploy and configure Microsoft 365 security features such as:

• Data Loss Prevention (DLP) policies
• Sensitivity labels and encryption rules
• Safe Links and Safe Attachments (Defender for Office 365)
• Defender for Endpoint integration with Microsoft 365 Defender suite

• Recommend architectures based on Microsoft best practices patterns (Secure Future Initiative and others), including Zero Trust access control methodologies.

• Lead initiatives to integrate Microsoft 365 features with broader endpoint, identity, and cloud security strategies.

End User Productivity Support

• Provide Tier III support for Microsoft 365 services, including:

• Entra
• Exchange Online
• Microsoft Teams
• SharePoint Online
• One Drive for Business
• Microsoft Office Apps (Word, Excel, Outlook, etc.)

• Troubleshoot issues related to Microsoft 365 access, synchronization, and collaboration.
• Act as a technical escalation point for Level I engineers and assist with troubleshooting escalated tickets.
• Advise clients on best practices for governance, collaboration, and compliance in the Microsoft 365 ecosystem.
• Participate in customer workshops, onboarding sessions, and quarterly business reviews (QBRs) with account managers as necessary.

Identity & Access Support

• Implement and fine-tune Microsoft Purview features including DLP, eDiscovery, Information Barriers, and sensitivity labels for classified or controlled unclassified data handling.
• Serve as a subject matter expert (SME) for Microsoft 365 compliance in support of CMMC, NIST 800-171, DFARS 7012, and Zero Trust adoption.
• Advise clients and internal stakeholders on secure M365 governance and risk mitigation strategies.
• Configure and maintain Conditional Access, passwordless authentication, and identity protection policies in Microsoft Entra .
• Support hybrid identity scenarios and secure guest access across Microsoft 365 services.
• Execute Microsoft 365 tenant baseline configurations and validation to support compliance initiatives.

Security & Compliance Tasks

• Implement and fine-tune Microsoft Purview features including DLP, eDiscovery, Information Barriers, and sensitivity labels for data governance and handling.

• Serve as a subject matter expert (SME) for Microsoft 365 compliance in support of CMMC, NIST 800-171, DFARS 7012, and Zero Trust adoption.

• Advise clients and internal stakeholders on secure M365 governance and risk mitigation strategies.

Service Delivery & Operations

• Respond to service requests and incidents in alignment with SLAs and internal escalation paths.
• Perform basic configuration and policy updates using Microsoft 365 Admin Center and Microsoft Endpoint Manager (Intune). Follow internal processes (such as change control) for making changes in customer environments.
• Document technical issues, solutions, and recurring patterns in internal knowledge base systems.

Customer Engagement

• Work directly with customer stakeholders, primarily technical contacts, to resolve routine issues and implement M365 changes.
• Participate in onboarding activities for new users, sites, or departments within existing managed customers.

Team Collaboration

• Provide technical leadership to Level I and II engineers, reviewing deliverables and providing hands-on support for advanced tasks.
• Lead internal knowledge-sharing…