Microsoft 365 & Azure Platform Engineer (Systems Engineer)

We’re always looking for diverse, talented, service-oriented people to join our exceptional team.

Microsoft 365 & Azure Platform Engineer (Systems Engineer)

The pay range for this position is listed below. Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered, as well as for room for growth and tenure achieved in a role over time. Typical new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their unique set of knowledge, skills, education, and experience as well as internal equity.

Pay Range:

$46.21 - $73.93

Scheduled Weekly Hours:

40

What You’ll Be Doing

Reporting to the IT Infrastructure Operations department, the Systems Engineer role for the Cloud and App Services team plays a crucial role in the design and configuration of the organization's identity, collaboration, and cloud systems. This position is responsible for the security, maintenance, and continuous improvement of identity systems and messaging platforms, and serves as an escalation point for incidents and support requests. The role requires a proactive approach to learning and adapting to emerging technologies, ensuring our IT systems remain robust and aligned with industry and security best practices. Effective communication and documentation will be essential for engaging with departments within and outside IT, following the change procedure, and supporting the organization's commitment to service excellence.

Manage and configure SchoolsFirst FCU complex infrastructure with a strong focus in one or more key functional areas:

• Entra ID (Formerly Azure Active Directory)

• Microsoft 365 Platform Services

• Power Platform and SharePoint Online

• Active Directory and Group Policy

• Azure Cloud Data Center

Primary duties associated with this role will include:

• Support and administer Microsoft 365 services, including Power Platform, SharePoint Online, OneDrive, Exchange Online, Teams, and related collaboration workloads.

• Implement and manage automation and orchestration using PowerShell, Azure Automation, Power Platform, and Logic Apps to streamline operational processes.

• Maintain and enhance identity and access integrations between Microsoft 365, Entra ID, Active Directory, and other enterprise systems.

• Support Power Platform governance and environment management, including monitoring connectors, enforcing policies, and assisting with flow troubleshooting.

• Support Azure Infrastructure design, governance, and overall management of subscriptions. Develop role-based access controls, maintain log analytics workspaces, and guide solution development for workload placement and optimization.

• Collaborate with Security and Compliance teams to maintain governance, auditing, and protection policies across Power Platform, Purview, Defender XDR, and Microsoft Sentinel.

• Contribute to automation and standardization efforts that improve efficiency, resiliency, and service quality across platforms.

• Partner with peer engineering teams to integrate Microsoft 365 identity and collaboration capabilities into broader enterprise systems.

Other duties related with this role:

• Develop and maintain configuration standards and operating procedures.

• Coordinate with vendors for technical support and upgrades.

• Troubleshoot advanced issues or problems, including escalation internally or to 3rd party vendor support, to drive root cause analysis.

• Forecast, recommend, and implement capacity planning.

• Manage vendors and hold them accountable to obligations.

• Submit and fulfill service requests.

• Respond to incidents and problems.

• Manage vendors and hold them accountable to contractual SLA’s and obligations.

• Provide KPI and metrics for reporting.

• Perform daily system monitoring, verifying the integrity and availability of systems infrastructure.

• Conduct after-hours maintenance.

• Perform ongoing performance tuning, hardware upgrades, and resource optimization as required.

• Gather and analyze system log files.

• Coordinate and collaborate with teammembers and service stakeholders.

• Create, change, and delete user accounts per request.

• Apply patches and upgrades on a regular basis.

• Provide assistance for support cases escalated by Systems Administrators.

• Perform peer review of submitted changes by Systems Administrators.

• Provide second tier support at the engineering level including investigation, troubleshooting, root cause analysis and resolution.

• Perform regular systems hardening to maintain security standards.

• Monitor ITSM tickets and prioritize appropriately.

• Provide second tier support at the engineering level including investigation, troubleshooting, root cause analysis and resolution.

• This position will be part of a paid on call rotation supporting the production environment 24x7x365.

Qualifications:

• Bachelor's Degree or equivalent years of experience required

• 5 - 7 years of system administration experience required

• Microsoft PL-104, AZ-104, SC-300, MS-102, or equivalent Microsoft certification preferred

Knowledge, Skills, and Abilities:

• Advanced knowledge with 5 to 7 years of experience with one of more of the following applications or platforms:
  ▪ Microsoft Active Directory, Microsoft Exchange, Microsoft IIS, Microsoft SQL, Microsoft Teams, & Azure Activity Directory (Entra ID)
  ▪ Credit Union specific applications
  ▪ General back office applications
  ▪ Sentinel, Solarwinds, Splunk, Upguard or other monitoring tools

• Advanced knowledge with 5 to 7 years of experience with one of more of the following Operating Platforms:

  ▪ Windows Server

  ▪ Windows 11 Enterprise

  ▪ Red Hat Enterprise Linux

  ▪ VMware vCenter and vSphere

  ▪ Azure or Azure Local

• Experience with SharePoint Online administration and governance.

• Exposure to Power Platform Center of Excellence (COE) or low-code automation governance.

• Knowledge of Microsoft Graph API or automation integrations across Microsoft services.

• Familiarity with Defender XDR, Sentinel, and Purview for monitoring and compliance.

• Advanced knowledge of operating system scripting and utilities.

• Advanced knowledge of SNMP and log monitoring tools.

• Advanced knowledge of TCP/IP and OSI Model.

• Advanced knowledge of firewalls, routers and switches.

• Intermediate knowledge of storage protocols; iSCSI, Fiber Channel and NFS.

• Advanced knowledge of audit and security best practices (NIST, PCI, ISO).

• Intermediate knowledge of Data Center standards including cabling, fire suppression, power and safety.

SchoolsFirst FCU is committed to Diverse, Equitable, and Inclusive Hiring

At SchoolsFirst FCU we are dedicated to building and growing a diverse, inclusive, and authentic Dream Team, so if you’re excited about a position or wanting to make a career change but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. Many skills are transferrable and you may be just the right candidate for the position, or for other roles we are working on.

SchoolsFirst Federal Credit Union is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. SchoolsFirst FCU is an equal opportunity employer and prohibits discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, political affiliation, or genetic information.

This organization participates in E-Verify.