What are the responsibilities and job description for the Senior Microsoft 365 Platform Engineer position at Suffolk Construction?
Overview
The Senior Microsoft 365 Platform Engineer is the operational and engineering core of Suffolk’s Microsoft ecosystem. This role manages tenant‑wide services, implements the Architect’s designs and standards, and drives automation‑first operations. The Engineer ensures reliability, security, and user experience across Exchange Online, Teams, SharePoint/OneDrive, Entra ID, Intune, Defender, and Power Platform, handling Tier 2/3 escalations and leading deployments and changes.
Responsibilities
Platform Operations & Administration
Required Qualifications
While performing the duties of this job, the employee is regularly required to sit for long periods of time; talk or hear; perform fine motor, hand and finger skills in the use of a keyboard, telephone, or writing. The employee is frequently required to stand; walk; and reach with arms and/or hands. Specific vision abilities include close vision, distance vision, depth perception and the ability to adjust focus. The employee will spend their time in an office environment with a quiet to moderate noise level. Job site walking.
EEO Statement
Suffolk provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, pregnancy or maternity, national origin, citizenship, genetic information, disability, protected veteran, gender identity, age or any other status protected by law. This policy applies to recruiting, hiring, transfers, promotions, terminations, compensation, benefits, and all other terms and conditions of employment. Suffolk will not tolerate any unlawful discrimination toward, or harassment of, applicants or employees by anyone at Suffolk, or anyone working on behalf of Suffolk.
The Senior Microsoft 365 Platform Engineer is the operational and engineering core of Suffolk’s Microsoft ecosystem. This role manages tenant‑wide services, implements the Architect’s designs and standards, and drives automation‑first operations. The Engineer ensures reliability, security, and user experience across Exchange Online, Teams, SharePoint/OneDrive, Entra ID, Intune, Defender, and Power Platform, handling Tier 2/3 escalations and leading deployments and changes.
Responsibilities
Platform Operations & Administration
- Administer, configure, and maintain Microsoft 365 workloads across Exchange Online, Teams, SharePoint Online/OneDrive.
- Manage Entra ID objects, Conditional Access, MFA, identity lifecycle, and directory hygiene.
- Operate Intune for device onboarding, compliance policies, app packaging/deployment, and security baselines.
- Handle Tier 2/3 incidents/problems; manage change control, maintenance windows, and service communications. Engineering & Automation
- Implement reference designs and standards defined by the Architect; deliver repeatable, supportable configurations.
- Build and maintain PowerShell and Graph automations for provisioning, reporting, remediation, and license hygiene.
- Lead feature deployments and migrations; coordinate pilots, adoption guides, and rollout plans. Security & Compliance Enablement
- Enforce DLP, retention, sensitivity labels, Conditional Access, and Defender controls according to policy.
- Maintain audit/compliance reporting; support assessments, investigations, and remediation activities. Power Platform Administration & ALM
- Administer environments, connectors, and DLP policies; support solution ALM and pipelines per CoE standards.
- Provide enablement to citizen developers within guardrails; review connectors and data access. Collaboration Services Enablement
- Provision Teams/SharePoint sites, implement IA/metadata/search patterns, and support
- Assist with migrations from legacy file services/SharePoint to SharePoint Online. Service Management & Support Engagement
- Provide telemetry and usage insights for capacity planning and license optimization.
- Engage Microsoft Premier/Unified Support for technical escalations and proactive services.
Required Qualifications
- 5 years administering Microsoft 365 at enterprise scale (≥1,000 users).
- Deep experience with Exchange Online, Teams, SharePoint/OneDrive, Entra ID, Intune, and Defender.
- Strong PowerShell and Graph API skills for automation and reporting.
- Proven delivery of tenant‑wide changes, migrations, and complex incident/problem resolution.
- Practical knowledge of Purview features (retention, DLP, eDiscovery) and security baselines.
- Microsoft Certified: Enterprise Administrator Expert and/or Messaging/Teams/Endpoint Administrator.
- Experience with Power Platform administration and CI/CD/ALM patterns.
- Experience in environments with regulatory or contractual compliance requirements.
- Incident and change resolution timeliness and quality
- Platform configuration compliance with standards
- Automation coverage and reduction of manual tasks
- Tenant health and performance (alerts, capacity, hygiene)
- User satisfaction with Microsoft 365 services
- Hands‑on executor with strong operational discipline and ownership mindset.
- Clear communicator who collaborates effectively with architects, security, support, and business teams.
- Continuous learner who tracks Microsoft roadmap changes and adopts best practices.
While performing the duties of this job, the employee is regularly required to sit for long periods of time; talk or hear; perform fine motor, hand and finger skills in the use of a keyboard, telephone, or writing. The employee is frequently required to stand; walk; and reach with arms and/or hands. Specific vision abilities include close vision, distance vision, depth perception and the ability to adjust focus. The employee will spend their time in an office environment with a quiet to moderate noise level. Job site walking.
EEO Statement
Suffolk provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, pregnancy or maternity, national origin, citizenship, genetic information, disability, protected veteran, gender identity, age or any other status protected by law. This policy applies to recruiting, hiring, transfers, promotions, terminations, compensation, benefits, and all other terms and conditions of employment. Suffolk will not tolerate any unlawful discrimination toward, or harassment of, applicants or employees by anyone at Suffolk, or anyone working on behalf of Suffolk.
