Manager, Platform Administration

POSITION SUMMARY

The Manager, Platform Administration is a hands-on technical leader responsible for the full administration and continuous improvement of Empower's Microsoft 365 environment. This role leads a team of Microsoft 365 Administrators and other system administrators while personally owning complex platform work across Exchange Online, hybrid email infrastructure, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Defender, Microsoft Purview, Intune, and Microsoft 365 Copilot. The ideal candidate brings deep, current M365 expertise, a bias for direct technical execution, and the leadership capability to build and grow a high-performing admin team. Experience with Dynamics 365 (D365) is a strong plus as the role supports cross-platform initiatives across the Microsoft ecosystem. This position collaborates closely with the Security and Infrastructure teams on identity-adjacent controls, including Microsoft Entra ID, Conditional Access, and Privileged Identity Management (PIM), and supports Empower's mission to deliver affordable, life-changing medication to 300 million people living healthier, happier lives.

RESPONSIBILITIES

Microsoft 365 Administration

• Administers and supports core Microsoft 365 services, including Microsoft Exchange, Teams, SharePoint Online, OneDrive for Business, Microsoft Defender, and Microsoft Purview, ensuring reliable and secure operations.
• Manages Microsoft 365 tenant configuration, policies, and service health across the organization.
• Administers Microsoft 365 licensing and subscription management, including allocation, renewals, and cost optimization.
• Leads Microsoft 365 migrations, upgrades, and service implementations from planning through execution.
• Monitors platform performance, availability, and security, proactively identifying and resolving issues to minimize service disruption.
• Drives digital workplace innovation by evaluating emerging Microsoft technologies—including Microsoft 365 Copilot, Copilot Studio, Viva, Power Platform, and SharePoint Framework—to streamline communication, automate routine processes, and improve employee engagement.
• Administers and governs Microsoft 365 Copilot and AI agents, including licensing, access controls, data protection, usage monitoring, and prompt/agent governance, to ensure secure and responsible AI adoption across the enterprise.
• Champions AI and automation strategy across the digital workplace, identifying opportunities to apply Microsoft 365 Copilot, Copilot Studio agents, and Power Platform automation to reduce manual effort and improve employee productivity.

Exchange Online & Hybrid Email

• Owns the full Exchange Online and enterprise email platform, serving as the primary administrator responsible for mailbox management, mail flow, transport rules, connectors, distribution groups, shared mailboxes, and service health.
• Manages hybrid Exchange configurations in partnership with the Infrastructure team, owning the Exchange Online side of the hybrid topology—including hybrid connectors, free/busy coexistence, address book synchronization, and mailbox migrations—while Infrastructure maintains the on-premises Exchange servers.
• Administers and enforces email security policies, including anti-spam, anti-phishing, DKIM, DMARC, SPF, safe links, and safe attachments, in collaboration with the Security team.
• Plans and executes mailbox migrations, email platform upgrades, and coexistence strategies as the organization transitions from on-premises Exchange to a fully cloud-hosted Exchange Online environment.
• Monitors Exchange Online service health, message trace, and delivery reporting to proactively identify and resolve email delivery issues, routing problems, and performance degradation.

Security & Infrastructure Collaboration (IAM-Adjacent)

• Maintains a working understanding of Microsoft Entra ID (Azure AD), Conditional Access, MFA, and Privileged Identity Management (PIM) to support effective collaboration with the Security and Infrastructure teams on identity-adjacent initiatives.
• Configures and maintains Single Sign-On (SSO) integrations for enterprise applications using Microsoft Entra ID, working in close partnership with the Security and Infrastructure teams to ensure seamless, secure authentication across SaaS and on-premises systems.
• Partners with Security on Microsoft Defender, Microsoft Purview, and compliance-related configurations within the M365 environment, supporting Zero Trust principles without owning IAM governance directly.
• Supports security assessments, access reviews, and audit activities related to Microsoft 365 platform configurations in partnership with Security and Compliance teams.
• Coordinates with the Infrastructure team on hybrid Exchange topology, on-premises server health, and cross-premises mail flow to ensure end-to-end email reliability and a seamless coexistence experience.

AI, Automation & Power Platform

• Leads the design and delivery of automation solutions using PowerShell (advanced), Microsoft Graph API, Azure Automation, and Power Platform to eliminate manual administrative tasks, reduce error, and improve team throughput.
• Designs, builds, and deploys Microsoft Copilot Studio agents and AI-driven workflows to automate repetitive administrative and support tasks, improving team efficiency and reducing response times across IT operations.
• Architects and manages Power Platform solutions—including Power Automate flows, Power Apps, and Power BI dashboards—to support IT operations, business process automation, and self-service capabilities across the enterprise.
• Governs Power Platform adoption across the organization, establishing environment strategy, data loss prevention (DLP) policies, connector governance, and maker enablement programs to ensure secure and scalable use.
• Integrates HR, ITSM, D365, and other enterprise systems with Microsoft 365 via Power Platform connectors and Microsoft Graph API to drive end-to-end workflow automation and reduce manual handoffs.
• Champions responsible AI adoption across the enterprise, governing Microsoft 365 Copilot licensing, access controls, prompt and agent governance, and usage monitoring to ensure secure, compliant, and high-value AI use at scale.

Compliance & Audit

• Supports audits related to SOX, HIPAA, PCI-DSS, ISO 27001, and NIST frameworks.
• Generates compliance reports and access review documentation to support audit and regulatory requirements.
• Participates in security assessments and remediation activities to address identified risks.

Team Leadership

• Manages and mentors a team of System Administrators, providing day-to-day guidance, hands-on technical direction, and coaching to build team depth and capability.
• Conducts performance management, including goal-setting, regular feedback, and annual performance reviews for direct reports.
• Leads hiring, onboarding, and skill development for the team to ensure adequate coverage and growth of technical capability.
• Plans and allocates team workload, balancing hands-on personal contribution with oversight of team-executed work across competing priorities.
• Serves as an escalation point for complex technical issues, personally engaging in critical incidents and complex troubleshooting alongside the team.
• Leads Microsoft 365 platform projects from initiation through completion, including migrations, service expansions, and capability rollouts.
• Provides technical guidance and mentorship to junior administrators and engineers.
• Develops operational procedures, standards, and technical documentation to support platform governance.
• Collaborates with security architects and infrastructure teams on strategic initiatives.
• Collaborates with stakeholders in People Operations, Facilities, and Compliance to define digital workplace requirements and deliver solutions that meet evolving enterprise needs.
• Owns the roadmap for assigned platforms, coordinating cross-functional rollout efforts and delivering training—including AI literacy and Copilot enablement programs—to maximize adoption and business value.
• Manages vendor relationships and software licensing for Microsoft and other applications, including renewals, cost optimization, and Microsoft Premier/Unified Support engagements.
• Oversees change management and incident response for Microsoft application environments, ensuring changes are tested, documented, and communicated with minimal business impact.
• Maintains comprehensive documentation, including system configurations, standard operating procedures, and knowledge base articles to support operational continuity.
• Partners with Security/IT Risk teams to support disaster recovery and business continuity planning for Microsoft application environments.

KNOWLEDGE AND SKILLS

• Demonstrated success leading enterprise-wide deployments or enhancements of Microsoft Teams, SharePoint Online, Microsoft 365 Copilot, Power Platform (Power Automate, Power Apps, Power BI), and Copilot Studio agents.
• Experience supporting enterprise environments with 1,000+ users.
• Experience working in hybrid cloud environments, including Microsoft Azure and on-premises Active Directory integration.
• Experience in a regulated industry (e.g., healthcare, pharmaceutical, life sciences) with knowledge of relevant data privacy and compliance requirements is a plus.
• Strong analytical, cross-functional collaboration, and communication skills, with a proactive, innovation-focused approach to digital employee experience, and expertise in platform governance, integration, and responsible AI adoption.
• Technical Skills:
  • Microsoft Technologies:Exchange Online (mailbox management, mail flow, transport rules, hybrid configuration, connectors, DKIM/DMARC/SPF, anti-spam/anti-phishing, message trace); Hybrid Exchange coexistence (HCW, hybrid connectors, free/busy, mailbox migration); Microsoft Teams; SharePoint Online; OneDrive for Business; Microsoft Defender Suite; Microsoft Purview; Microsoft Intune; Microsoft Entra ID (Azure AD); Azure AD Connect/Cloud Sync; Microsoft 365 Copilot; Copilot Studio; Power Platform (Power Automate, Power Apps, Power BI); Dynamics 365 (preferred).
  • Identity & Access Management (Supporting Knowledge):SSO configuration and integration (SAML 2.0, OAuth 2.0, OIDC); MFA; Conditional Access; Identity Governance; RBAC; Privileged Identity Management (PIM); Access Reviews.
  • Authentication & Federation:SAML 2.0; OAuth 2.0; OpenID Connect (OIDC); LDAP; Kerberos; SCIM provisioning.
  • Automation:PowerShell (advanced); Microsoft Graph API; Azure Automation; Power Automate; Power Apps; Power BI; Copilot Studio; Microsoft 365 Copilot administration.
  • Cloud Platforms:Microsoft Azure (IaaS/PaaS fundamentals); Azure AD Connect/Cloud Sync; hybrid identity environments; Azure Logic Apps (preferred).

EXPERIENCE AND QUALIFICATIONS

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Systems Engineering, or a related field required; equivalent work experience may be considered in lieu of a degree.
• 10+ years of experience in IT systems administration, digital workplace technology, or Microsoft 365 platform ownership, including a minimum of 7 years of deep, hands-on Microsoft 365 administration across core services. Hands-on experience with Power Platform (Power Automate, Power Apps, Power BI) and Microsoft 365 Copilot administration is strongly preferred. Experience with Dynamics 365 (D365) administration or support is a plus. Familiarity with Microsoft Entra ID, Conditional Access, SSO configuration, and IAM concepts is expected; direct IAM ownership is not required for this role.
• 2+ years of experience directly managing or leading technical staff, with a demonstrated ability to balance hands-on technical work with people leadership.