Microsoft 365 Cloud Administrator

Position Overview The Microsoft 365 Cloud Administrator is a key member of our IT team, responsible for the administration, security, and maintenance of our Microsoft 365 ecosystem. This role focuses on modern device management using Intune, ensuring secure and compliant endpoints, and managing user access and collaboration services, including SharePoint Online and Microsoft Teams. Key Responsibilities Endpoint and Device Management (Intune) • Manage the full lifecycle of endpoint devices (Windows, macOS, iOS, Android) using Microsoft Intune. • Deploy, configure, and maintain device profiles, compliance policies, and security baselines to enforce organizational standards. • Develop and maintain Windows laptop images or implement modern provisioning methods like Windows Autopilot for a seamless out-of-box experience. • Oversee application deployment and management through Intune, including packaging and deploying line-of-business (LOB) and Win32 applications. • Provide advanced troubleshooting for device enrollment, policy application, and endpoint connectivity issues. • Device enrollment and provisioning: Manage the process for adding new devices to the MDM system, including both company-owned and employee-owned devices. • Software and application management: Control which applications can be installed on devices, deploy required apps, and push out software updates and security patches. Security and Compliance • Create and enforce security policies across the Microsoft 365 environment, protecting against threats and ensuring regulatory compliance. • Configure Conditional Access policies to control user access to resources based on device compliance, location, and user risk. • Monitor security and compliance reports within the Intune Admin Center, Microsoft 365 Defender, and other relevant portals. • Collaborate with security teams to respond to security incidents and improve the organization's security posture. Identity and Access Management • Administer user accounts, groups, and licenses in Microsoft Entra ID (formerly Azure Active Directory). • Configure and manage SAML-based authentication for third-party Software-as-a-Service (SaaS) applications, enabling Single Sign-On (SSO) for users. • Perform user account lifecycle management, including onboarding, modifications, and termination processes. Collaboration and Application Administration • Administer Microsoft 365 applications, including SharePoint Online, Teams, OneDrive, and OneNote. • Manage SharePoint sites, document libraries, and access control, while implementing proper governance and permission structures. • Administer and manage Microsoft Teams, including user permissions, team creation, and collaboration architecture. • Ensure the seamless and secure flow of information and collaboration across the entire Microsoft 365 suite. Reporting and Maintenance • Generate and analyze reports on endpoint health, security compliance, and application usage to drive continuous improvement. • Develop and maintain comprehensive documentation for all administration, deployment, and security procedures. Qualifications • Proven experience as a Microsoft 365 Administrator with a strong focus on Intune. • Deep knowledge of endpoint management principles and best practices. • Experience with scripting languages, particularly PowerShell, for automation. • Familiarity with modern deployment methods like Windows Autopilot. • Strong understanding of security concepts, Conditional Access, and SAML authentication. • Excellent problem-solving, communication, and collaboration skills. • Relevant Microsoft certifications (e.g., MS-102: Microsoft 365 Administrator, MD-102: Endpoint Administrator) are a plus Apply tot his job