Systems Engineer

WHAT YOU WILL DO:

This role will help establish a secure, well-governed and supportable identity and collaboration environment. The successful contractor will work across Operations, Engineering, IT and Security to turn an organically grown Microsoft Entra environment into an enterprise-ready platform

KEY RESPONSIBILITIES:

• Review the current tenant configuration, administrative model, licensing position, integrations, service usage and historical requests
• Discover any existing appropriate ownership and guardrails, and ensure that low current utilization does not develop in to further unmanaged adoption
• Define a prioritized remediation plan based on security risk, operational impact and business value
• implement approved changes, validate outcomes and communication risks, dependencies and decisions clearly.
• Work closely with Security on SIEM visibility, logging and detections and alerting
• Document the target state and train Operations and Engineering teams to maintain it.

ESSENTIAL CRITERIA:

• Expert-level experience managing Microsoft Entra ID in complex or enterprise environments, including tenants that require governance uplift.
• Strong understanding of Microsoft 365 licensing, entitlement management, administrative roles, conditional access, and least-privilege principles.
• Proven ability to design and implement privileged access controls, including Privileged Identity Management (PIM), role activation, approval workflows, and access reviews.
• Hands-on experience integrating identity providers such as Okta with Microsoft Entra, including SCIM provisioning, lifecycle management, and troubleshooting.
• Strong scripting and automation capability using tools such as PowerShell, Microsoft Graph API, or equivalent automation platforms.
• Practical experience securing and governing Microsoft Teams, SharePoint, OneDrive, and other Microsoft 365 workloads.
• Experience reviewing audit and security logs, integrating Microsoft cloud telemetry with SIEM platforms, and improving detections and operational visibility.
• Working knowledge of Azure cloud management, with the ability to:
• Discover existing usage
• Assess governance and security posture
• Prevent further unmanaged adoption
• Provide oversight and control rather than large-scale cloud operations support
• Ability to produce clear technical documentation, operating procedures, control descriptions, and training materials.
• Comfortable working independently in a short, outcome-focused, fixed-term engagement.

DESIRABLE CRITERIA:

• Experience leading Microsoft Entra or Microsoft 365 governance remediation from discovery through implementation and handover.
• Demonstrated success reducing unnecessary licensing, improving license assignment accuracy, and introducing automated joiner, mover, and leaver processes.
• Experience rationalizing low-use or poorly governed services and reducing unmanaged OneDrive usage through clear policy, migration, and decommissioning plans.
• Knowledge of Microsoft Defender, Microsoft Purview, Azure Monitor, Microsoft Sentinel, or comparable security and compliance tooling.
• Experience translating historic ad hoc IT requests into approved patterns, service catalogs, standards, and change processes.
• Relevant Microsoft, identity, security, or cloud certifications.

The EOS pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, experience, education, knowledge, skills, and abilities, as well as internal equity, market data, or other laws.

Pay Range

$120,000—$145,000 USD