Azure Landing Zone and M365 Platform Engineering Lead

Job Description

Job DescriptionThe mission

Build and steward a secure, scalable Microsoft cloud platform that our global teams can trust every day. As our Azure Landing Zone and M365 Platform Engineering Lead, you’ll convert high-level architecture into reliable engineering, mentor a focused team, and harden governance across Azure, Entra ID, and Microsoft 365.

Your first 90 days

• Days 1–30: Assess current Azure subscriptions, landing zone structures, RBAC, and policy frameworks; inventory Entra ID Conditional Access and authentication flows; review M365 tenant baselines and licensing enablement; align with the M365/Azure Principal Architect on priorities.
• Days 31–60: Implement standard automation patterns (PowerShell, Graph API, Functions, Logic Apps); uplift monitoring and alerting; document runbooks and operating procedures; close quick-win cost, performance, and security gaps.
• Days 61–90: Formalize governance guardrails across Azure, M365 administration, and Entra ID; advance hybrid identity reliability (sync and federation); launch a roadmap for identity modernization and operational excellence.

Core responsibilities

• Lead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence; champion accountability and continuous improvement.
• Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring; tune cost, security, and performance; align with enterprise architecture and cloud strategy.
• Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.
• Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.
• Operationalize compliance—meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.
• Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.

Work setup

• Location: Cranberry Township, PA
• Schedule: Hybrid—3 days in office, 2 days remote
• Reports to: Sr. Manager – User Experience & Collaboration

Qualifications

• BS in Computer Science, Information Systems, Engineering, or related field—or equivalent experience.
• 4+ years in Azure, Entra ID, or enterprise cloud identity engineering.
• 1–2+ years leading or supervising technical teams.
• Strong cloud governance and automation experience.
• Advanced Azure platform engineering and governance knowledge.
• Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication frameworks.
• Skilled with PowerShell, Microsoft Graph API, and cloud automation tools.

Compensation

For pay transparency: the estimated base salary range is $116,800 to $146,000 annually, based on experience, qualifications, and skills. We are committed to equity and transparency in our people practices.

Education note

Proficiency: Bachelor’s Degree.