Note: The job is a remote job and is open to candidates in USA. Empower Pharmacy is a healthcare company focused on making quality, affordable medication accessible through personalized medicine and pharmaceutical manufacturing. The Manager, Platform & Identity Administration leads Microsoft 365, identity and access management, AI-powered productivity, automation, security, compliance, and team administration initiatives to support a secure and productive digital workplace.
Responsibilities
- Administers and supports core Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft Defender, and Microsoft Purview, ensuring reliable and secure operations
- Manages Microsoft 365 tenant configuration, policies, and service health across the organization
- Administers Microsoft 365 licensing and subscription management, including allocation, renewals, and cost optimization
- Leads Microsoft 365 migrations, upgrades, and service implementations from planning through execution
- Monitors platform performance, availability, and security, proactively identifying and resolving issues to minimize service disruption
- Drives digital workplace innovation by evaluating emerging Microsoft technologies, including Microsoft 365 Copilot, Copilot Studio, Viva, Power Platform, and SharePoint Framework, to streamline communication, automate routine processes, and improve employee engagement
- Administers and governs Microsoft 365 Copilot and AI agents, including licensing, access controls, data protection, usage monitoring, and prompt/agent governance, to ensure secure and responsible AI adoption across the enterprise
- Champions AI and automation strategy across the digital workplace, identifying opportunities to apply Microsoft 365 Copilot, Copilot Studio agents, and Power Platform automation to reduce manual effort and improve employee productivity
- Manages Microsoft Entra ID (Azure AD) and hybrid identity environments, including directory synchronization via Azure AD Connect/Cloud Sync
- Designs and maintains Role-Based Access Control (RBAC) models to ensure appropriate, least-privilege access across systems
- Implements and supports Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and Conditional Access policies to secure enterprise access
- Administers identity lifecycle management processes, including Joiner, Mover, and Leaver (JML) workflows
- Integrates enterprise applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM protocols
- Develops and manages access governance processes to ensure appropriate and auditable access across enterprise systems
- Conducts periodic access reviews and certifications to validate user entitlements
- Implements least-privilege access principles across Microsoft 365 and integrated platforms
- Supports segregation of duties (SoD) requirements to reduce the risk of conflicting access
- Ensures compliance with corporate security policies and regulatory standards
- Designs and implements Zero Trust identity controls to strengthen enterprise security posture
- Manages privileged access controls and administrative roles across Microsoft 365 and identity platforms
- Supports Privileged Identity Management (PIM) to govern just-in-time and time-bound administrative access
- Investigates authentication and access-related security incidents in partnership with the Security team
- Implements security monitoring and risk mitigation controls to detect and respond to identity-based threats
- Develops automation using PowerShell, Microsoft Graph API, Azure Automation, and Power Platform (preferred) to streamline administrative tasks
- Builds and deploys Copilot Studio agents and AI-driven workflows to automate repetitive administrative and support tasks, improving team efficiency and response times
- Automates provisioning, deprovisioning, and access management processes to improve efficiency and reduce manual error
- Integrates HR, ITSM, and other business applications with IAM solutions to support end-to-end identity workflows
- Supports audits related to SOX, HIPAA, PCI-DSS, ISO 27001, and NIST frameworks
- Generates compliance reports and access review documentation to support audit and regulatory requirements
- Participates in security assessments and remediation activities to address identified risks
- Manages and mentors a team of Microsoft 365 and Identity Administrators, providing day-to-day guidance, coaching, and technical direction
- Conducts performance management, including goal-setting, regular feedback, and annual performance reviews for direct reports
- Leads hiring, onboarding, and skill development for the team to ensure adequate coverage and growth of technical capability
- Plans and allocates team workload, balancing hands-on personal contribution with oversight of team-executed work across competing priorities
- Serves as an escalation point for complex technical issues, personally engaging in critical incidents and complex troubleshooting alongside the team
- Leads identity and Microsoft 365-related projects from initiation through completion
- Provides technical guidance and mentorship to junior administrators and engineers
- Develops operational procedures, standards, and technical documentation to support platform governance
- Collaborates with security architects and infrastructure teams on strategic initiatives
- Collaborates with stakeholders in People Operations, Facilities, and Compliance to define digital workplace requirements and deliver solutions that meet evolving enterprise needs
- Owns the roadmap for assigned platforms, coordinating cross-functional rollout efforts and delivering training—including AI literacy and Copilot enablement programs—to maximize adoption and business value
- Manages vendor relationships and software licensing for Microsoft applications, including renewals, cost optimization, and Microsoft Premier/Unified Support engagements
- Oversees change management and incident response for Microsoft application environments, ensuring changes are tested, documented, and communicated with minimal business impact
- Maintains comprehensive documentation, including system configurations, standard operating procedures, and knowledge base articles to support operational continuity
- Partners with Security/IT Risk teams to support disaster recovery and business continuity planning for Microsoft application environments
Skills
- • Demonstrated success leading enterprise-wide deployments or enhancements of Microsoft Teams, SharePoint, Microsoft 365 Copilot, and related AI and automation tools
- • Experience supporting enterprise environments with 1,000+ users
- • Experience working in hybrid cloud environments
- • Strong analytical, cross-functional collaboration, and communication skills, with a proactive, innovation-focused approach to digital employee experience, and expertise in platform governance, integration, and responsible AI adoption
- • Microsoft Technologies: Microsoft Entra ID (Azure AD); Azure AD Connect/Cloud Sync; Exchange Online; Microsoft Teams; SharePoint Online; OneDrive; Microsoft Defender Suite; Microsoft Purview; Intune (preferred)
- • Identity & Access Management: SSO; MFA; Conditional Access; Identity Governance; RBAC; Privileged Identity Management (PIM); Access Reviews
- • Authentication & Federation: SAML 2.0; OAuth 2.0; OpenID Connect (OIDC); LDAP; Kerberos
- • Automation: PowerShell (advanced); Microsoft Graph API; Power Automate; Azure Automation
- • Cloud Platforms: Microsoft Azure; AWS IAM (preferred); Google Workspace or GCP Identity (preferred)
- • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Systems Engineering, or a related field required; equivalent work experience may be considered in lieu of a degree
- • 10+ years of experience in IT systems administration, digital workplace technology, or Microsoft 365 platform ownership, including a minimum of 7 years administering Microsoft 365 services and 5+ years in Identity and Access Management (IAM)
- • 2+ years of experience directly managing or leading technical staff, with a demonstrated ability to balance hands-on technical work with people leadership
- • Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Messaging Administrator Associate (MS-203), or Microsoft Certified: Microsoft 365 Administrator Expert required
- While performing the responsibilities of the job, the employee is required to talk and hear
- The employee is often required to remain in a stationary position for a significant portion of the workday and frequently use their hands and fingers to handle or feel in order to access, input, and retrieve information from the computer and other office productivity devices
- Employees are regularly required to move about the office and around the corporate campus
- The employee is regularly required to stand, walk, reach with arms and hands, climb or balance, and to stoop, kneel, crouch or crawl
- • Experience in a regulated industry (e.g., healthcare, pharmaceutical, life sciences) with knowledge of relevant data privacy and compliance requirements is a plus
- • Microsoft Certified: Copilot and Agent Administration Fundamentals strongly preferred
Benefits
- Medical coverage
- Dental coverage
- Vision coverage
- Paid time off
- 401(k) matching
- Wellness perks
- IV therapy
- Compounded medications
Company Overview
Company H1B Sponsorship