Azure 365 Administrator

The Azure 365 Administrator is responsible for the operational administration of the Azure and Microsoft 365 platform at PACT (Pearson Accelerator Construction Team), a General Partnership of Alberici, Amico, Kenaidan and Obayashi. The primary mission of the role is to enable and assist the development work of the Data & Innovation team by provisioning, securing and maintaining the platform layer on which the program's business intelligence and automation developers build, while carrying tenant administration for IT Operations & Support. The role reports to the IT Operations & Support Coordinator, who owns objectives, priorities, performance management and standards, and holds a dotted-line working relationship with the Manager, Data & Innovation, who sets the practical demand and sequencing for platform enablement work; where the two are in tension, the IT Operations & Support Coordinator arbitrates competing priorities. The role ensures the platform is administered with discipline, repeatability and documented controls.
RESPONSIBILITIES
Microsoft 365 Tenant Administration and Licensing
Administer tenant configuration and monitor service health across the Microsoft 365 estate
Administer Exchange Online, Microsoft Teams and OneDrive at the service level, including policies, settings and troubleshooting
Manage licence assignment, entitlement management and cost tracking across the Microsoft 365 E5 estate and the Copilot add-on
Operate tenant change control and maintain documented configuration baselines for all administered services
Reconcile licence position and entitlement records on a defined cadence, with variances documented and resolved
Identity and Access Administration (Entra ID)
Administer users, groups and roles, including group strategy, naming standards and lifecycle management
Operate Conditional Access and multi-factor authentication policies, including testing, exclusions and change documentation
Maintain privileged access and role-assignment hygiene, including periodic review of administrative role assignments
Operate Privileged Identity Management so administrative role access is granted just in time and time-bound
Manage the Entra identity object lifecycle for guest and external identities, including invitation, review and removal
Coordinate with the SharePoint Administrator, who retains resource-level sharing and content recertification for collaboration sites
Automate joiner, mover and leaver processing driven from the HR system of record
Platform Enablement for Data & Innovation
Provision and maintain Microsoft Fabric and Power BI workspaces, capacities and data gateways
Manage service principals, managed identities and service accounts so pipelines are never tied to an individual's credentials
Administer secret and credential storage in an approved vault, with rotation and controlled access
Define and operate Power Platform environment strategy, data loss prevention policies and connector governance
Provision Azure resources, including storage, data services and networking, on which analytics and automation work depends
Support deployment pipelines and maintain separation of development, test and production environments
Tenant Governance and Analytics Guardrails
Administer Power BI and Microsoft Fabric tenant settings, including publish-to-web, external sharing, export and workspace-creation controls
Govern public publishing and external sharing of analytics content through approved tenant settings and a documented exception process
Monitor and report on tenant setting usage against a defined review cadence
Monitor capacity utilisation and manage platform cost across Fabric, Power BI and Azure resources
Information Protection, Security and Compliance Operations
Own and operate the configuration of Microsoft Purview sensitivity labels, label policies, data loss prevention policies and retention policies
Implement policy requirements defined by the Manager, Security & Compliance, who evidences their operation to external parties
Operate third-party Microsoft 365 backup, covering schedule, immutability configuration, retention windows and restore testing
Support the implementation and maintenance of Microsoft security baselines across the tenant
Maintain audit log collection and retention across in-scope workloads to meet certification and investigative requirements
Produce control evidence for the ISO 27001 and SOC 2 initiatives and for external audit engagements
Own Copilot readiness on the platform side through identity, permission and label hygiene, with the AI-use policy held by the Manager, Security & Compliance
Automation, Documentation and Operational Support
Write and maintain PowerShell and Microsoft Graph scripts for bulk administration, reporting and repeatable provisioning
Maintain runbooks, configuration documentation and standard operating procedures for all administered services
Act as the L2 to L3 escalation point for identity, licensing, access and platform incidents raised through the IT helpdesk intake
Perform root-cause analysis and resolution, feeding fixes back into baselines, runbooks and automation
Manage vendor and Microsoft support cases through to closure, recording resolutions in service records
Provide platform support to both office-based and field-based staff for day-to-day operational needs
Report platform risks and governance exceptions through the IT Operations & Support Coordinator to the IT Steering Committee
WORKING CONDITIONS
The position will be based at our office in Mississauga, Ontario, with visits to the Airport site as required. Your work schedule will be Monday to Friday during regular office or site hours. At times, operational needs may require work outside these hours, with reasonable notice provided. All schedule or on‑call adjustments will comply with applicable employment standards legislation. It is mandatory for all employees to complete a Criminal Background check and successfully attain a Restricted Access Identity Card (RAIC) upon joining the company.
DESIRED SKILLS, KNOWLEDGE, COMPETENCIES
Three to five or more years administering Microsoft 365 and Azure in a production environment
Entra ID administration experience covering groups, roles, Conditional Access and guest identity management
Three or more years of Power Platform, Microsoft Fabric or Power BI tenant administration experience
Two or more years of practical experience with service principals, managed identities and vault-based secret management
Two or more years of PowerShell and Microsoft Graph scripting for bulk administration, reporting and provisioning
Microsoft licensing administration experience, including assignment, entitlement management and periodic reconciliation of licence position
Working practice in change and incident management, with documentation discipline evidenced by durable runbooks and configuration records
Clear written and verbal communication with technical developers and with non-technical business stakeholders
Post-secondary education in information technology, computer science or a related discipline, or equivalent practical experience
Microsoft certification such as AZ-104, MS-102, SC-300 or PL-600 preferred or in progress

Employment type
Partner Company - TBD

Work arrangement
No