Azure 365 Administrator

RESPONSIBILITIES

Microsoft 365 Tenant Administration and Licensing

• Administer tenant configuration and monitor service health across the Microsoft 365 estate
• Administer Exchange Online, Microsoft Teams and OneDrive at the service level, including policies, settings and troubleshooting
• Manage licence assignment, entitlement management and cost tracking across the Microsoft 365 E5 estate and the Copilot add-on
• Operate tenant change control and maintain documented configuration baselines for all administered services
• Reconcile licence position and entitlement records on a defined cadence, with variances documented and resolved

Identity and Access Administration (Entra ID)

• Administer users, groups and roles, including group strategy, naming standards and lifecycle management
• Operate Conditional Access and multi-factor authentication policies, including testing, exclusions and change documentation
• Maintain privileged access and role-assignment hygiene, including periodic review of administrative role assignments
• Operate Privileged Identity Management so administrative role access is granted just in time and time-bound
• Manage the Entra identity object lifecycle for guest and external identities, including invitation, review and removal
• Coordinate with the SharePoint Administrator, who retains resource-level sharing and content recertification for collaboration sites
• Automate joiner, mover and leaver processing driven from the HR system of record

Platform Enablement for Data & Innovation

• Provision and maintain Microsoft Fabric and Power BI workspaces, capacities and data gateways
• Manage service principals, managed identities and service accounts so pipelines are never tied to an individual's credentials
• Administer secret and credential storage in an approved vault, with rotation and controlled access
• Define and operate Power Platform environment strategy, data loss prevention policies and connector governance
• Provision Azure resources, including storage, data services and networking, on which analytics and automation work depends
• Support deployment pipelines and maintain separation of development, test and production environments

Tenant Governance and Analytics Guardrails

• Administer Power BI and Microsoft Fabric tenant settings, including publish-to-web, external sharing, export and workspace-creation controls
• Govern public publishing and external sharing of analytics content through approved tenant settings and a documented exception process
• Monitor and report on tenant setting usage against a defined review cadence
• Monitor capacity utilisation and manage platform cost across Fabric, Power BI and Azure resources

Information Protection, Security and Compliance Operations

• Own and operate the configuration of Microsoft Purview sensitivity labels, label policies, data loss prevention policies and retention policies
• Implement policy requirements defined by the Manager, Security & Compliance, who evidences their operation to external parties
• Operate third-party Microsoft 365 backup, covering schedule, immutability configuration, retention windows and restore testing
• Support the implementation and maintenance of Microsoft security baselines across the tenant
• Maintain audit log collection and retention across in-scope workloads to meet certification and investigative requirements
• Produce control evidence for the ISO 27001 and SOC 2 initiatives and for external audit engagements
• Own Copilot readiness on the platform side through identity, permission and label hygiene, with the AI-use policy held by the Manager, Security & Compliance

Automation, Documentation and Operational Support

• Write and maintain PowerShell and Microsoft Graph scripts for bulk administration, reporting and repeatable provisioning
• Maintain runbooks, configuration documentation and standard operating procedures for all administered services
• Act as the L2 to L3 escalation point for identity, licensing, access and platform incidents raised through the IT helpdesk intake
• Perform root-cause analysis and resolution, feeding fixes back into baselines, runbooks and automation
• Manage vendor and Microsoft support cases through to closure, recording resolutions in service records
• Provide platform support to both office-based and field-based staff for day-to-day operational needs
• Report platform risks and governance exceptions through the IT Operations & Support Coordinator to the IT Steering Committee

WORKING CONDITIONS

The position will be based at our office in Mississauga, Ontario, with visits to th