M365 Engineer

Akkodis is seeking a M365 Engineer role is a Full-Time with a client located in Charlotte, NC-(Hybrid). Ideally looking for applicants to have a solid background in M365, Microsoft Entra ID, Active Directory, OAuth 2.0/Single Sign-On (SSO). This individual will be responsible for developing new business opportunities, strengthening existing customer relationships, and achieving territory revenue targets,would come as a big plus.

Salary Range: $120k-$125k/Annum + Benefits, The salary may be negotiable based on experience, education, geographic location, and other factors.

Responsibilities

• Serve as the primary administrator and technical owner of the Microsoft Entra ID environment.
• Administer and maintain user lifecycle management, identity governance, authentication methods, and directory services.
• Design, implement, and maintain enterprise identity and access management solutions.
• Configure, support, and troubleshoot Single Sign-On (SSO) integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other modern authentication protocols.
• Administer Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra.
• Manage and optimize Multifactor Authentication (MFA) solutions, including Microsoft Authenticator, authentication strengths, password less authentication, and self-service password reset capabilities.
• Develop and maintain Conditional Access policies aligned with security, compliance, and business requirements.
• Monitor identity-related health, security posture, and access trends while proactively identifying opportunities for improvement and optimization.
• Partner with application owners, cybersecurity teams, and vendors to integrate applications securely with Microsoft Entra ID.
• Maintain and troubleshoot hybrid identity solutions including Entra Connect and Active Directory synchronization services
• Administer and maintain Active Directory infrastructure, including users, groups, organizational units (OUs), delegation models, and directory services.
• Design, implement, and troubleshoot Group Policy Objects (GPOs) to support security, compliance, and operational requirements.
• Manage and maintain hybrid identity infrastructure supporting synchronization between Active Directory and Microsoft Entra ID.
• Administer and troubleshoot Microsoft Entra Connect, synchronization services, identity provisioning, and directory-related issues.
• Manage and maintain DNS and DHCP services supporting enterprise authentication and application connectivity.
• Perform certificate lifecycle management activities, including certificate renewals, replacements, and troubleshooting for authentication, federation, and secure communications.
• Support Public Key Infrastructure (PKI) and certificate-based authentication solutions where applicable.
• Assist with identity-related disaster recovery planning, testing, and operational readiness activities.
• Collaborate with infrastructure, cybersecurity, and application teams to ensure secure and reliable identity services across on-premises and cloud environments.
• Monitor and maintain the health, availability, and performance of identity-related infrastructure components.

Qualifications

• Strong expertise in Microsoft 365 administration, Microsoft Entra ID, hybrid identity, and directory services.
• Deep understanding of authentication and federation technologies including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Single Sign-On (SSO), and Multifactor Authentication (MFA).
• Experience administering and troubleshooting Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra
• Strong understanding of Conditional Access, authentication methods, identity governance, and modern identity security practices.
• Advanced knowledge of Active Directory, Group Policy, DNS, DHCP, Microsoft Entra Connect, and hybrid identity architectures.
• Experience managing and troubleshooting identity synchronization between Active Directory and Microsoft Entra ID.
• Knowledge of Public Key Infrastructure (PKI), certificate lifecycle management, and certificate-based authentication services.
• Proficiency with PowerShell automation and Microsoft Graph API administration.
• Knowledge of disaster recovery planning, testing, and validation methodologies, with willingness to participate in recovery exercises when required.
• Experience supporting Microsoft Intune, endpoint management, and device-based access controls is a plus.
• Familiarity with AWS identity integrations, IAM, and Amazon Route 53 DNS administration is preferred.
• Must be comfortable working within a strict and highly governed change management environment.
• Must be committed to maintaining security, risk, and compliance controls within a regulated industry environment.
• Ability to create and maintain technical documentation, operational procedures, and knowledge transfer materials.
• Demonstrated ability to troubleshoot complex technical issues, take ownership of problems, and drive resolutions through completion.
• Excellent communication, analytical, and problem-solving skills.

Equal Opportunity Employer/Veterans/Disabled

Benefits offerings include but are not limited to:

• 401(k) with match

• Medical insurance

• Dental Insurance

• Vision assistance

• Paid Holidays Off

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

· The California Fair Chance Act

· Los Angeles City Fair Chance Ordinance

· Los Angeles County Fair Chance Ordinance for Employers

· San Francisco Fair Chance Ordinance