Microsoft 365 Engineer

Microsoft 365 Engineer at Vanguard

Key Responsibilities:

• Design and maintain enterprise architecture for Microsoft Office 365 and related services including Exchange, SharePoint, Teams, OneDrive.
• Lead modernization initiatives and define future-state roadmaps aligned with business goals.
• Evaluate and implement new Microsoft features and services ensuring architectural and security alignment.
• Manage advanced security configurations, including DLP, MIP, ATP and Conditional Access.
• Collaborate with InfoSec to ensure compliance with internal policies and regulatory standards.
• Define and enforce governance policies for data retention, access control and compliance.
• Manage Microsoft licensing models, provide insights on license tiering, renewals, audits and vendor negotiations.
• Ensure seamless integration with Digital Guardian, DNS filtering, firewall appliances, VPN, remote access and identity providers such as OKTA and Azure AD.
• Troubleshoot and optimize cross-platform workflows and data flows.
• Serve as the final escalation point for complex Microsoft Office issues and lead post-mortem reviews.
• Mentor Tier 1 and Tier 2 engineers and contribute to a growing knowledge base.
• Evaluate emerging Microsoft technologies and lead proof-of-concept initiatives.
• Represent the Office platform in enterprise architecture boards and committees.
• Implement real-time monitoring strategies using Microsoft-native tools and third-party platforms.
• Develop dashboards and alert mechanisms to detect performance anomalies and security threats.
• Collaborate with Security Operations and NOC teams for incident response and service health monitoring.
• Define SLAs and KPIs for platform reliability and drive improvements through data analysis.

Qualifications:

• 8+ years of enterprise IT experience with 5+ years on Microsoft Office 365 architecture.
• Deep knowledge of Microsoft 365 security, compliance, and governance features.
• Experience with enterprise identity and access management tools like OKTA and Azure AD.
• Strong understanding of network security principles including DNS, firewalls, VPNs.
• Familiarity with DLP tools such as Digital Guardian.
• Microsoft certifications (MS-101, MS-500, AZ-305, SC-300) are strongly preferred.
• Excellent communication, documentation, and stakeholder engagement skills.

Preferred Attributes:

• Strategic thinker with a passion for innovation and continuous improvement.
• Proven ability to lead cross-functional initiatives and influence stakeholders.
• Experience in regulated industries like finance, healthcare, or government.
• Familiarity with scripting and automation including Python, PowerShell, and Graph API.
• Experience with modern deployment methodologies such as GitHub and Infrastructure as Code pipelines.
• Knowledge of Zero Trust architecture and conditional access policies.

Special Factors:

• No visa sponsorship available.

About Vanguard:

Vanguard is on a mission to work for the long-term financial wellbeing of its clients by delivering transformative products and services. The organization values continuous learning and collaboration.

How We Work:

Vanguard has implemented a hybrid working model that balances enhanced flexibility with in-person learning, collaboration, and connection.

Key skills/competency:

• Microsoft Office 365
• Enterprise Architecture
• Security Configuration
• Compliance
• Governance
• Licensing
• Identity Management
• Modernization
• Troubleshooting
• Monitoring