Senior M365 Governance Engineer

Description

The company is hiring a senior M365 Governance Engineer to own the governance framework for its Microsoft 365 messaging and collaboration platforms, including Exchange Online and Teams. The role works alongside the Enterprise Apps team on SharePoint and OneDrive.

The role is mainly about governance: writing a governance plan and designing and enforcing controls for lifecycle management, retention, data protection, and access and sharing. The goal is to keep the messaging and collaboration environment secure, compliant, and well organized as it grows. You will work closely with the GRC team.

Hands-on engineering of Exchange Online and Teams is part of the job, but it serves the governance work. You will make sure everything on these platforms follows policy from the start, not as an afterthought.

Responsibilities

• Set up and maintain governance policies for Exchange Online and Teams, covering naming conventions, provisioning workflows, and the full lifecycle of mailboxes, distribution lists, Microsoft 365 Groups, and Teams, from creation through ownership, archiving, and deletion.
• Configure and upkeep retention policies, sensitivity labels, and Data Loss Prevention (DLP) rules in Microsoft Purview for mail and Teams content.
• Manage external sharing, guest access, and Teams permissions to stop oversharing and lower data exposure risk.
• Build and maintain dashboards and reports in Power BI, Purview, or native M365 admin reporting that track compliance, license use, and policy adherence.
• Work with security and compliance teams on audits, eDiscovery requests, and regulatory obligations such as GDPR, HIPAA, SOC 2, and ISO 27001 as they apply to messaging and collaboration data.
• Build automation with PowerShell, Microsoft Graph API, and Power Automate to handle orphaned mailbox and Team cleanup, ownership certification, and policy enforcement.
• Run regular access reviews and governance audits of mailboxes and Teams to catch and fix policy drift.
• Write and maintain governance documentation, runbooks, and training, and serve as the escalation point for governance incidents such as oversharing, policy violations, and misconfigured permissions.
• Work with team owners and business units to adopt governance practices without blocking productivity.
• Assess new Microsoft 365 governance and compliance features as they ship, and evaluate their impact before any tenant-wide rollout.
• Administer and engineer Exchange Online, including mail flow rules, connectors, distribution lists and shared mailboxes, and anti-spam and anti-phishing settings.
• Support Teams architecture, including calling and voice where applicable, meeting policies, channel structure, and Teams app management.
• Monitor service health, plan capacity and licensing, and troubleshoot platform issues, working with Microsoft support when needed.

Requirements

• 7+ years of hands-on work in Microsoft 365 governance, compliance, or administration, including direct experience with Exchange Online and/or Microsoft Teams.
• Strong experience with Microsoft Purview Compliance Center, including retention labels and policies, DLP, and sensitivity labels.
• A proven record designing and enforcing lifecycle management, naming conventions, and access and sharing governance for mailboxes, groups, and Teams.
• Proficient in PowerShell for M365 governance automation, using the Exchange Online and Teams modules.
• Familiar with Microsoft Graph API for governance automation and reporting.
• Working knowledge of common regulatory frameworks, including GDPR, HIPAA, SOC 2, ISO 27001, and NIST, as they apply to messaging and collaboration governance.
• Working understanding of Exchange Online mail flow and Teams architecture, enough to apply governance controls well.
• Experience managing and optimizing M365 licenses.
• Strong analytical and documentation skills, and the ability to explain technical policy in plain terms to non-technical stakeholders.
• Nice to have: Microsoft certifications such as SC-400 (Information Protection Administrator), MS-102 (Microsoft 365 Administrator), or MS-700 (Managing Microsoft Teams).
• Nice to have: background in IT compliance, risk management, or audit support.
• Nice to have: experience preparing M365 Copilot data for messaging and collaboration content, including oversharing remediation and sensitivity label coverage.
• Nice to have: experience with Power Automate and Power BI for governance reporting and workflow automation.
• Nice to have: exposure to ITIL or change management frameworks.
• Nice to have: familiarity with Teams Phone and voice engineering, such as direct routing, calling plans, and PSTN connectivity.
• Nice to have: background in messaging migrations, such as legacy Exchange, other email platforms, or Teams and Slack migrations.
• Clear communicator who can explain governance reasoning to both technical and non-technical audiences.
• Able to weigh security and compliance needs against user productivity and business needs.
• Detail-oriented, with strong follow-through on policy enforcement and documentation.
• Collaborative, since the role touches nearly every team in the organization.

Conditions

The role is primarily governance-focused, with hands-on Exchange Online and Teams engineering supporting it.

Works closely with the GRC team and the Enterprise Apps team.

Benefits

• Competitive benefits package including medical, dental, vision, disability and life insurance, 401(k), paid holidays and paid time off, employee assistance programs, and more.