Lead Engineer, Microsoft 365 and Identity Automation

Description

The company is a biotechnology firm that invents and builds platform companies, pairing scientists, company builders and capital under one roof. Its portfolio includes companies working on vaccines, disease treatment, early detection and sustainable agriculture.

The role sits on the team that runs the Microsoft 365 and Entra ID environment. The company uses one shared Microsoft 365 tenant for dozens of portfolio companies, each with its own identity, domain and lifecycle needs. Much of the identity work happens in code, including Microsoft Graph, Exchange Online and SharePoint Online PowerShell, Python and integration platform workflows.

This is a hands-on individual contributor role focused on engineering rather than architecture or people management. You will take over existing code, keep it running, extend it as identity sources and attributes change, and keep Entra lifecycle management working as the business evolves. You will also be the senior escalation point when automation or tenant behavior fails.

Responsibilities

• Build, maintain and extend production automation with Microsoft Graph, PowerShell and supported APIs.
• Own inherited scripts, integrations and services: fix defects, pay down technical debt, write documentation and update code as identity sources, attributes, domains and organizational requirements change.
• Design automation that is secure and reliable, with sound API patterns, monitoring, logging, error handling and least-privilege authentication using app registrations, service principals, managed identities, certificates and tightly scoped permissions.
• Maintain and improve Exchange Online and SharePoint Online automation covering mailboxes, groups, permissions, domains, mail flow, site provisioning, sharing and lifecycle changes such as launches, mergers and renames.
• Keep joiner, mover and leaver processes accurate for employees and contractors across the company and its portfolio companies, including provisioning, groups, licensing, access changes and deprovisioning.
• Build and support Entra capabilities such as Lifecycle Workflows, identity governance, dynamic groups, Privileged Identity Management, Conditional Access, B2B identity, single sign-on and SCIM provisioning.
• Build and maintain integrations between HR, ITSM, identity and collaboration systems using Microsoft Graph, native Microsoft features, custom code or platforms such as Workato where suitable.
• Apply disciplined engineering practices: Git-based source control, peer review, testing, change control, monitoring, CI/CD, runbooks and clear support documentation.
• Mentor peers and act as the senior escalation point for complex Microsoft 365 and identity issues, fixing root causes through code, configuration or native platform features.

Requirements

• 6+ years engineering and supporting Microsoft 365 and Entra ID environments, including 3+ years building and maintaining production automation with Microsoft Graph.
• Advanced PowerShell skills, including the Microsoft Graph PowerShell SDK and Exchange Online PowerShell, plus working proficiency in another scripting or programming language.
• Proven experience taking over, troubleshooting, refactoring and supporting live codebases.
• Hands-on work with Entra identity lifecycle management, groups and licensing, app registrations, service principals, Conditional Access, PIM, B2B identity, SSO and SCIM provisioning.
• Experience automating Exchange Online administration and working with SharePoint Online administration or automation.
• Working knowledge of REST APIs, OAuth 2.0, JSON, Git workflows, code review, testing, monitoring and unattended authentication.
• Broad Microsoft 365 operations knowledge, with the ability to troubleshoot complex issues across Entra ID, Exchange Online, Intune, SharePoint and Teams.
• Strong problem-solving, documentation and communication skills, including leading technical work and explaining tradeoffs to technical and non-technical stakeholders.
• Preferred: experience with Workato or a comparable platform such as Power Automate, Azure Logic Apps, MuleSoft or Boomi, or demonstrated ability to work effectively with integration and low-code automation platforms.
• Preferred: experience with Entra ID Governance, HR-driven identity integration, or multi-company and multi-domain Microsoft 365 environments.
• Preferred: experience supporting company launches, mergers, divestitures, tenant transitions or other complex organizational lifecycle events.
• Preferred: experience with Azure Automation, Azure Functions, Key Vault, CI/CD pipelines, infrastructure as code or configuration as code.
• Preferred: experience with CoreView, ShareGate or comparable Microsoft 365 administration, migration and governance tools.
• Preferred: experience in regulated environments such as life sciences, GxP or HIPAA.
• Preferred: relevant certifications such as SC-300, MS-102, AZ-104 or AZ-500.

Conditions

Equal opportunity applies regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

The salary range is $128,000 to $176,000. Pay depends on qualifications, skills, competencies and experience.

Benefits

• Healthcare coverage, an annual incentive program, retirement benefits and a broad range of other benefits are offered.