Azure Landing Zone and M365 Platform Engineering Lead
Westinghouse Electric - USA
Cranberry Twp, PA, USA
6/14/2022
Engineering
Full Time
Job Description
Job DescriptionThe mission
Build and steward a secure, scalable Microsoft cloud platform that our global teams can trust every day. As our Azure Landing Zone and M365 Platform Engineering Lead, you’ll convert high-level architecture into reliable engineering, mentor a focused team, and harden governance across Azure, Entra ID, and Microsoft 365.
Your first 90 days
- Days 1–30: Assess current Azure subscriptions, landing zone structures, RBAC, and policy frameworks; inventory Entra ID Conditional Access and authentication flows; review M365 tenant baselines and licensing enablement; align with the M365/Azure Principal Architect on priorities.
- Days 31–60: Implement standard automation patterns (PowerShell, Graph API, Functions, Logic Apps); uplift monitoring and alerting; document runbooks and operating procedures; close quick-win cost, performance, and security gaps.
- Days 61–90: Formalize governance guardrails across Azure, M365 administration, and Entra ID; advance hybrid identity reliability (sync and federation); launch a roadmap for identity modernization and operational excellence.
Core responsibilities
- Lead the function—set direction for Azure/Entra/cloud identity engineers; manage workload, priorities, performance, and delivery cadence; champion accountability and continuous improvement.
- Engineer Azure at scale—govern subscriptions, resource groups, and landing zones; standardize RBAC and policy; drive automation and monitoring; tune cost, security, and performance; align with enterprise architecture and cloud strategy.
- Own identity fundamentals—Entra ID directory services, identity lifecycle, Conditional Access, authentication, and privileged identity governance; maintain robust hybrid identity integration, synchronization, and federation.
- Govern the M365 tenant—oversee global settings, compliance, admin roles, and licensing enablement; enforce tenant-wide policies, baselines, and configuration standards.
- Operationalize compliance—meet cybersecurity and regulatory requirements; maintain documentation, SOPs/runbooks, and architectural references.
- Automate for reliability—build standardized patterns; expand proactive monitoring and remediation to increase platform resilience.
Work setup
- Location: Cranberry Township, PA
- Schedule: Hybrid—3 days in office, 2 days remote
- Reports to: Sr. Manager – User Experience & Collaboration
Qualifications
- BS in Computer Science, Information Systems, Engineering, or related field—or equivalent experience.
- 4+ years in Azure, Entra ID, or enterprise cloud identity engineering.
- 1–2+ years leading or supervising technical teams.
- Strong cloud governance and automation experience.
- Advanced Azure platform engineering and governance knowledge.
- Expert-level Entra ID knowledge: identity lifecycle, Conditional Access, authentication frameworks.
- Skilled with PowerShell, Microsoft Graph API, and cloud automation tools.
Compensation
For pay transparency: the estimated base salary range is $116,800 to $146,000 annually, based on experience, qualifications, and skills. We are committed to equity and transparency in our people practices.
Education note
Proficiency: Bachelor’s Degree.