Deputy Manager - Senior Microsoft 365 & Cloud Administrator

<p class="MsoNormal"><b>Job Description: Senior Microsoft 365 & Cloud Administrator</b></p><p><b></b></p><b></b><p class="MsoNormal"><b>Role:</b> Senior Microsoft 365 (Office 365) & Cloud Administrator<br /> <b>Team:</b> IT Infrastructure / Cloud Operations<br /> <b>Experience:</b> 8–12 years total, with at least 5 years administering Microsoft 365 at enterprise scale and at least 3 years administering Azure (AWS exposure a plus)<br /> <b>Employment Type:</b> Full-time</p><p></p><p class="MsoNormal"><b>Role Summary</b></p><p><b></b></p><b></b><p class="MsoNormal">We are looking for a Senior Microsoft 365 & Cloud Administrator to manage, secure, and optimize our Microsoft 365 collaboration platform and cloud infrastructure. You will be responsible for the day-to-day administration, security, compliance, and continuous improvement of Exchange Online, SharePoint, Teams, OneDrive, Entra ID, Intune, Purview, and Defender, along with Azure cloud resources supporting enterprise and business applications.</p><p></p><p class="MsoNormal">The role combines hands-on administration with senior ownership: designing policies, leading migrations and rollouts, handling escalations, automating operations, and ensuring the environment meets security, data protection, and regulatory requirements expected in a pharma organization.</p><p></p><p class="MsoNormal"><b>Key Responsibilities</b></p><p><b></b></p><b></b><p class="MsoNormal"><b>1. Microsoft 365 Administration</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Administer and maintain the Microsoft 365 tenant, including tenant settings, service health, message center changes, and licensing.<p></p></li> <li class="MsoNormal"><b>Exchange Online:</b> mailbox and shared mailbox management, distribution and M365 groups, mail flow and transport rules, connectors, retention, journaling, and hybrid Exchange where applicable.<p></p></li> <li class="MsoNormal"><b>SharePoint Online and OneDrive:</b> site architecture, permissions, sharing policies, storage management, site lifecycle, and governance.<p></p></li> <li class="MsoNormal"><b>Microsoft Teams:</b> Teams governance, policies, meeting and calling settings, Teams Phone/Direct Routing (if applicable), guest and external access, and lifecycle management.<p></p></li> <li class="MsoNormal">Manage Microsoft 365 Apps deployment, update channels, and add-ins.<p></p></li> <li class="MsoNormal">Administer Power Platform environments (Power Apps, Power Automate, Power BI) including DLP policies and environment governance.<p></p></li> <li class="MsoNormal">Govern <b>Microsoft 365 Copilot</b> and AI features: license assignment, data access readiness, oversharing remediation, sensitivity labels, and usage policies.<p></p></li> <li class="MsoNormal">Plan and execute tenant migrations, mailbox and file migrations, and tenant-to-tenant consolidations.<p></p></li> </ul><p class="MsoNormal"><b>2. Identity and Access Management</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Administer <b>Microsoft Entra ID (Azure AD)</b>: users, groups, dynamic groups, guest accounts, app registrations, and enterprise applications.<p></p></li> <li class="MsoNormal">Manage hybrid identity with Entra Connect / Cloud Sync and on-premises Active Directory.<p></p></li> <li class="MsoNormal">Configure and maintain <b>Conditional Access</b>, MFA, passwordless authentication, SSPR, and risk-based policies.<p></p></li> <li class="MsoNormal">Implement <b>Privileged Identity Management (PIM)</b>, role-based access, access reviews, and identity governance (joiner-mover-leaver processes).<p></p></li> <li class="MsoNormal">Integrate SaaS and enterprise applications through SSO (SAML, OIDC) and SCIM provisioning.<p></p></li> </ul><p class="MsoNormal"><b>3. Endpoint and Device Management</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Manage devices through <b>Microsoft Intune</b>: enrollment (Autopilot), compliance policies, configuration profiles, application deployment, and patching.<p></p></li> <li class="MsoNormal">Manage mobile devices and app protection policies (MAM) for BYOD and corporate devices.<p></p></li> <li class="MsoNormal">Coordinate with endpoint and security teams on Windows Update for Business and device hardening baselines.<p></p></li> </ul><p class="MsoNormal"><b>4. Security and Threat Protection</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Administer <b>Microsoft Defender</b> suite: Defender for Office 365 (anti-phishing, safe links, safe attachments), Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps.<p></p></li> <li class="MsoNormal">Monitor and improve <b>Microsoft Secure Score</b> and Identity Secure Score.<p></p></li> <li class="MsoNormal">Investigate and respond to security incidents such as phishing, compromised accounts, and suspicious sign-ins, in coordination with the SOC.<p></p></li> <li class="MsoNormal">Configure email authentication (SPF, DKIM, DMARC) and protect against spoofing and impersonation.<p></p></li> <li class="MsoNormal">Integrate M365 and Azure logs with SIEM platforms (e.g., Microsoft Sentinel, Splunk).<p></p></li> </ul><p class="MsoNormal"><b>5. Compliance, Data Protection and Governance</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Administer <b>Microsoft Purview</b>: sensitivity labels, DLP policies, retention policies and labels, records management, eDiscovery, audit logs, insider risk, and information barriers where required.<p></p></li> <li class="MsoNormal">Align retention and records management with the company's record retention policy and legal hold requirements.<p></p></li> <li class="MsoNormal">Support GxP-relevant collaboration use cases (e.g., controlled document storage, audit trails, and access control on regulated SharePoint sites) in alignment with <b>21 CFR Part 11, EU Annex 11, and ALCOA+</b> where applicable, working with QA and CSV teams.<p></p></li> <li class="MsoNormal">Support data privacy compliance (GDPR, India DPDP Act) and internal or external audits.<p></p></li> <li class="MsoNormal">Maintain M365 backup and recovery solutions (e.g., Microsoft 365 Backup, Veeam, AvePoint, Druva).<p></p></li> </ul><p class="MsoNormal"><b>6. Cloud Administration (Azure and Multi-Cloud)</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Administer <b>Azure subscriptions</b> and resources, including VMs, storage accounts, virtual networks, NSGs, load balancers, App Services, Azure SQL, Key Vault, and backup.<p></p></li> <li class="MsoNormal">Manage resource organization through management groups, subscriptions, resource groups, tagging, and <b>Azure Policy</b>.<p></p></li> <li class="MsoNormal">Implement and maintain RBAC, managed identities, and secure access to cloud resources.<p></p></li> <li class="MsoNormal">Monitor performance, availability, and health using Azure Monitor, Log Analytics, and alerts.<p></p></li> <li class="MsoNormal">Manage backup, Azure Site Recovery, and disaster recovery testing for cloud workloads.<p></p></li> <li class="MsoNormal">Support hybrid connectivity (VPN, ExpressRoute) and integration with on-premises infrastructure.<p></p></li> <li class="MsoNormal">Track and optimize cloud costs through Azure Cost Management, rightsizing, reservations, and cleanup of unused resources.<p></p></li> <li class="MsoNormal">Support AWS or other cloud environments where required.<p></p></li> </ul><p class="MsoNormal"><b>7. Automation and Operations</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Automate administration tasks using <b>PowerShell, Microsoft Graph API, Azure CLI</b>, and Azure Automation / Logic Apps.<p></p></li> <li class="MsoNormal">Use infrastructure-as-code (Bicep, ARM, or Terraform) for repeatable cloud deployments where applicable.<p></p></li> <li class="MsoNormal">Maintain standard operating procedures, runbooks, configuration documentation, and change records.<p></p></li> <li class="MsoNormal">Handle L2/L3 escalations, lead root cause analysis, and drive problem resolution.<p></p></li> <li class="MsoNormal">Follow ITIL processes for incident, change, problem, and service request management.<p></p></li> <li class="MsoNormal">Monitor Microsoft roadmap and service changes and plan their impact and rollout.<p></p></li> </ul><p class="MsoNormal"><b>8. Leadership and Collaboration</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Mentor junior administrators and service desk teams; create knowledge articles and training.<p></p></li> <li class="MsoNormal">Work with security, network, application, QA, and business teams on projects and requirements.<p></p></li> <li class="MsoNormal">Manage Microsoft partners and vendors for support cases, licensing, and projects.<p></p></li> <li class="MsoNormal">Drive user adoption and awareness of collaboration tools and security best practices.<p></p></li> </ul><p class="MsoNormal"><b>Required Skills and Experience</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Deep, hands-on experience administering <b>Microsoft 365</b>: Exchange Online, SharePoint Online, OneDrive, Teams, and the M365 admin center.<p></p></li> <li class="MsoNormal">Strong expertise in <b>Entra ID</b>, Conditional Access, MFA, PIM, and hybrid identity with Active Directory.<p></p></li> <li class="MsoNormal">Hands-on experience with <b>Intune</b> and Autopilot.<p></p></li> <li class="MsoNormal">Practical experience with <b>Microsoft Defender</b> and <b>Microsoft Purview</b>.<p></p></li> <li class="MsoNormal">Solid <b>Azure administration</b> experience: compute, storage, networking, RBAC, policy, monitoring, and backup.<p></p></li> <li class="MsoNormal">Strong <b>PowerShell</b> scripting and familiarity with Microsoft Graph.<p></p></li> <li class="MsoNormal">Experience with M365 licensing (E3/E5, add-ons) and license optimization.<p></p></li> <li class="MsoNormal">Experience in migrations, tenant governance, and large user environments (several thousand users).<p></p></li> <li class="MsoNormal">Understanding of ITIL processes and change management.<p></p></li> <li class="MsoNormal">Exposure to regulated environments; pharma or life sciences experience is a strong advantage.<p></p></li> </ul><p class="MsoNormal"><b>Preferred Qualifications</b></p><p><b></b></p><b></b><ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal">Bachelor's degree in Computer Science, Information Technology, or a related field.<p></p></li> <li class="MsoNormal">Microsoft certifications such as <b>MS-102 (Microsoft 365 Administrator Expert), AZ-104 (Azure Administrator), SC-300 (Identity and Access Administrator), SC-400/SC-401 (Information Protection), MD-102 (Endpoint Administrator)</b>, or AZ-305 (Azure Solutions Architect).<p></p></li> <li class="MsoNormal">ITIL Foundation certification.<p></p></li> <li class="MsoNormal">Exposure to AWS administration and multi-cloud environments.<p></p></li> <li class="MsoNormal">Experience with Microsoft 365 Copilot deployment and governance.<p></p></li> </ul><p> </p><p class="MsoNormal"></p><p> </p>