RESPONSIBILITIES

Microsoft 365 Tenant Administration and Licensing

- Administer tenant configuration and monitor service health across the Microsoft 365 estate
- Administer Exchange Online, Microsoft Teams and OneDrive at the service level, including policies, settings and troubleshooting
- Manage licence assignment, entitlement management and cost tracking across the Microsoft 365 E5 estate and the Copilot add-on
- Operate tenant change control and maintain documented configuration baselines for all administered services
- Reconcile licence position and entitlement records on a defined cadence, with variances documented and resolved

Identity and Access Administration (Entra ID)

- Administer users, groups and roles, including group strategy, naming standards and lifecycle management
- Operate Conditional Access and multi-factor authentication policies, including testing, exclusions and change documentation
- Maintain privileged access and role-assignment hygiene, including periodic review of administrative role assignments
- Operate Privileged Identity Management so administrative role access is granted just in time and time-bound
- Manage the Entra identity object lifecycle for guest and external identities, including invitation, review and removal
- Coordinate with the SharePoint Administrator, who retains resource-level sharing and content recertification for collaboration sites
- Automate joiner, mover and leaver processing driven from the HR system of record

Platform Enablement for Data & Innovation

- Provision and maintain Microsoft Fabric and Power BI workspaces, capacities and data gateways
- Manage service principals,



managed identities and service accounts so pipelines are never tied to an individual's credentials
- Administer secret and credential storage in an approved vault, with rotation and controlled access
- Define and operate Power Platform setting strategy, data loss prevention policies and connector governance
- Provision Azure resources, including storage, data services and networking, on which analytics and automation work depends
- Support deployment pipelines and maintain separation of development, test and production environments

Tenant Governance and Analytics Guardrails

- Administer Power BI and Microsoft Fabric tenant settings, including publish-to-web, external sharing, export and workspace-creation controls
- Govern public publishing and external sharing of analytics content through approved tenant settings and a documented exception process
- Monitor and report on tenant setting usage against a defined review cadence
- Monitor capacity utilisation and manage platform cost across Fabric, Power BI and Azure resources

Information Protection, Security and Compliance Operations

- Own and operate the configuration of Microsoft Purview sensitivity labels, label policies, data loss prevention policies and retention policies
- Implement policy requirements defined by the Manager, Security & Compliance,



who evidences their operation to external parties
- Operate third-party Microsoft 365 backup, covering schedule, immutability configuration, retention windows and restore testing
- Support the implementation and maintenance of Microsoft security baselines across the tenant
- Maintain audit log collection and retention across in-scope workloads to meet certification and investigative requirements
- Produce control evidence for the ISO 27001 and SOC 2 initiatives and for external audit engagements
- Own Copilot readiness on the platform side through identity, permission and label hygiene, with the AI-use policy held by the Manager, Security & Compliance

Automation, Documentation and Operational Support

- Write and maintain PowerShell and Microsoft Graph scripts for bulk administration, reporting and repeatable provisioning
- Maintain runbooks, configuration documentation and standard operating procedures for all administered services
- Act as the L2 to L3 escalation point for identity, licensing, access and platform incidents raised through the IT helpdesk intake
- Perform root-cause analysis and resolution, feeding fixes back into baselines, runbooks and automation
- Manage vendor and Microsoft support cases through to closure, recording resolutions in service records
- Provide platform support to both office-based and field-based staff for day-to-day operational needs
- Report platform risks and governance exceptions through the IT Operations & Support Coordinator to the IT Steering Committee

WORKING CONDITIONS

The position will be based at our o

📌 Azure 365 Administrator (Mississauga)
🏢 PACT
📍 Mississauga