About the Role
Lead the design, administration, and advancement of Microsoft 365 and Entra ID ecosystems for a mission-driven, research-focused organization. Serve as a technical expert and strategic partner, ensuring secure, resilient, and optimized cloud collaboration and identity platforms for a diverse, distributed workforce. Collaborate across engineering, security, and operational teams to strengthen cloud posture, drive automation, and implement best-in-class governance and security practices. This role influences long-term cloud strategy, mentors junior staff, and supports AIR’s mission to improve lives through research, evidence, and innovation.
Responsibilities
- Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features.
- Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role-based access control.
- Manage Exchange Online configuration, including mail flow, transport rules, connectors, policies, hybrid connectivity, and advanced mail delivery troubleshooting.
- Utilize Kusto Query Language (KQL) in Microsoft 365 Defender, Purview, and Log Analytics for incident investigation, pattern identification, and detection query/report development.
- Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment.
- Develop and maintain automation, scripts, and integrations using PowerShell and Microsoft Graph API for streamlined administration, reporting, and provisioning.
- Contribute to CI/CD and infrastructure-as-code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads.
- Work with containerized and cloud workloads (e.g., Kubernetes) integrating with M365/Entra for identity, security, or application access.
- Lead complex incident response and root-cause analysis for M365 and identity-related outages or security events.
- Produce and maintain technical documentation, standards, runbooks, and architectural diagrams for Microsoft 365 and Entra services.
- Mentor junior administrators and provide guidance on best practices, governance, and operational excellence.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, or related discipline and at least 9 years of relevant IT industry experience.
- Master’s degree with at least 7 years of relevant experience.
- At least 15 years of relevant industry experience.
- Minimum 5 years of hands-on administration experience with Microsoft 365 and Entra ID in a mid- to large-enterprise environment.
- Must be currently authorized to work in the U.S. on a full-time basis.
- Employment-based visa sponsorship (including H-1B sponsorship) is not available.
- Qualified candidates may need to meet certain residency requirements.
Skills
- Effective communication with technical and non-technical internal and external clients.
- Ability to collaborate effectively in a virtual, cross-functional team environment.
- Ability to work independently and collaboratively.
- Adaptability in a fast-paced environment to manage multiple concurrent deliveries.
- Analytical, critical thinking, and problem-solving skills with a focus on detail and high quality.
- Expert-level experience with Exchange Online: mail flow troubleshooting, advanced transport configuration, security and compliance policies, and third-party service integration.
- Strong experience using KQL in Microsoft 365 Defender, Sentinel, or Log Analytics for log querying, custom detections, and security/operational event analysis.
- Deep understanding of identity and access concepts: SSO, OAuth/OIDC, federation, conditional access, MFA, and privileged identity management.
- Proficiency with PowerShell for automation, bulk operations, and configuration management in Microsoft 365 and Entra ID.
- Solid knowledge of security, compliance, and governance capabilities in M365 (e.g., DLP, retention, eDiscovery, audit, safe links/attachments).
- Exposure to Azure DevOps, GitHub, or similar tools for managing scripts, pipelines, and infrastructure-as-code definitions for Microsoft 365.
- Familiarity with container platforms (e.g., Kubernetes/AKS) and their integration with Entra ID for identity and access control.
- Experience using Microsoft Graph API for automation, integration, and advanced reporting scenarios (preferred).
- Experience with Microsoft Sentinel or similar SIEM platforms for M365 and Entra monitoring and analytics (preferred).
- Experience with the Varonis platform, AWS, and/or Google Workspace (preferred).
- Passion for learning and understanding technology at both high and detailed levels.
Location
- Remote, United States
- U.S. office locations
Work Type
- Full-time
Experience Level
- At least 9 years of relevant IT industry experience (with Bachelor's degree).
- At least 7 years of relevant experience (with Master's degree).
- At least 15 years of relevant industry experience.
- Minimum 5 years of hands-on administration experience with Microsoft 365 and Entra ID in a mid- to large-enterprise environment.
Education Level
- Bachelor’s degree in Computer Science, Computer Engineering, or related discipline.
- Master’s degree.
Salary/Compensations
- $140,000 - $164,000 USD
About the Company
- American Institutes for Research (AIR) is a nonpartisan, not-for-profit organization founded in 1946 and headquartered in Arlington, Virginia.
- Conducts behavioral and social science research and delivers technical assistance to address pressing challenges in the United States and globally.
- Generates evidence and applies data-driven solutions to expand opportunities and improve lives for all.
Equal Opportunity
- American Institutes for Research is an equal employment opportunity/affirmative action employer.
- All qualified applicants receive consideration for employment without discrimination based on protected characteristics by federal, state, or local law.
- Protected characteristics include actual or perceived race (including hair texture, type, and protective hairstyles), creed, color, religion, alienage or national origin, ancestry, citizenship status, age, physical or mental disability, medical condition (e.g., cancer), sex, gender, gender identity or expression (including transgender status), sexual orientation, marital status, civil union status, pregnancy, childbirth or related medical conditions, genetic information, or military or veteran status.
- AIR adheres to strict child safeguarding principles; selected candidates undergo reference and background checks.
- AIR maintains a drug-free work environment.
- Reasonable accommodation for employment process due to physical or mental disability can be requested via email to Taliba Boone at tboone@air.org or by calling 202.403.5000.
