Job Description

Job Description

The Azure 365 Administrator is responsible for the operational administration of the Azure and Microsoft 365 platform at PACT (Pearson Accelerator Construction Team), a General Partnership of Alberici, Amico, Kenaidan and Obayashi.

The primary mission of the role is to enable and assist the development work of the Data & Innovation team by provisioning, securing and maintaining the platform layer on which the program's business intelligence and automation developers build, while carrying tenant administration for IT Operations & Support.

The role reports to the IT Operations & Support Coordinator, who owns objectives, priorities, performance management and standards, and holds a dotted-line working relationship with the Manager, Data & Innovation, who sets the practical demand and sequencing for platform enablement work; where the two are in tension, the IT Operations & Support Coordinator arbitrates competing priorities. The role ensures the platform is administered with discipline, repeatability and documented controls.

RESPONSIBILITIES

Microsoft 365 Tenant Administration and Licensing Administer tenant configuration and monitor service health across the Microsoft 365 estate Administer Exchange Online, Microsoft Teams and OneDrive at the service level, including policies, settings and troubleshooting Manage licence assignment, entitlement management and cost tracking across the Microsoft 365 E5 estate and the Copilot add-on Operate tenant change control and maintain documented configuration baselines for all administered services Reconcile licence position and entitlement records on a defined cadence, with variances documented and resolved Identity and Access Administration (Entra ID) Administer users, groups and roles, including group strategy,



naming standards and lifecycle management Operate Conditional Access and multi-factor authentication policies, including testing, exclusions and change documentation Maintain privileged access and role-assignment hygiene, including periodic review of administrative role assignments Operate Privileged Identity Management so administrative role access is granted just in time and time-bound Manage the Entra identity object lifecycle for guest and external identities, including invitation, review and removal Coordinate with the SharePoint Administrator, who retains resource-level sharing and content recertification for collaboration sites Automate joiner, mover and leaver processing driven from the HR system of record Platform Enablement for Data & Innovation Provision and maintain Microsoft Fabric and Power BI workspaces, capacities and data gateways Manage service principals, managed identities and service accounts so pipelines are never tied to an individual's credentials Administer secret and credential storage in an approved vault, with rotation and controlled access Define and operate Power Platform workplace strategy, data loss prevention policies and connector governance Provision Azure resources, including storage, data services and networking, on which analytics and automation work depends Support deployment pipelines and maintain separation of development,



test and production environments Tenant Governance and Analytics Guardrails Administer Power BI and Microsoft Fabric tenant settings, including publish-to-web, external sharing, export and workspace-creation controls Govern public publishing and external sharing of analytics content through approved tenant settings and a documented exception process Monitor and report on tenant setting usage against a defined review cadence Monitor capacity utilisation and manage platform cost across Fabric, Power BI and Azure resources Information Protection, Security and Compliance Operations Own and operate the configuration of Microsoft Purview sensitivity labels, label policies, data loss prevention policies and retention policies Implement policy requirements defined by the Manager, Security & Compliance, who evidences their operation to external parties Operate third-party Microsoft 365 backup, covering schedule, immutability configuration, retention windows and restore testing Support the implementation and maintenance of Microsoft security baselines across the tenant Maintain audit log collection and retention across in-scope workloads to meet certification and investigative requirements Produce control evidence for the ISO 27001 and SOC 2 initiatives and for external audit engagements Own Copilot readiness on the platform side through identity, permission and label hygiene, with the AI-use policy held by the Manager, Security & Compliance Automation, Documentation and Operational Support Write and maintain PowerShell and Microsoft Graph scripts for bulk administration, reporting and repeatable provisioning Maintain runbooks, configuration documentation and standard operating procedures for all administered services Act as the L2 to L3

📌 Azure 365 Administrator (Canada)
🏢 PACT
📍 Canada