Perform the hands-on configuration and validation of the Tranche-1 Microsoft tenant foundation in accordance with the approved architecture and security guardrails.
Key responsibilities
- Provision/configure the Microsoft Entra tenant and associated baseline settings.
- Configure custom domains following DNS changes performed by BayWa r.e.
- Implement approved:
- Tenant naming conventions.
- Administrative accounts.
- Global Administrator accounts.
- Emergency/break-glass accounts.
- Administrator MFA.
- Administrative role assignments.
- Configure tenant geography and applicable workload location settings based on the agreed EEA/UK approach.
- Configure tenant prerequisites required to receive and assign Microsoft licences.
- Establish the initial licence groups/assignment mechanism where included.
- Implement approved tenant-level configuration required for downstream Dynamics 365 / Power Platform provisioning.
- Execute technical validation and readiness checks.
- Maintain configuration records and implementation evidence.
- Support troubleshooting during tenant creation and initial integration.
- Support technical handover to the Dynamics / Business Suite team.
- Produce as-built configuration documentation.
Required skills and experience
- 5–8+ years of hands-on Microsoft 365 / Entra administration and engineering.
- Robust hands-on experience with:
- Entra ID.
- M365 Admin Center.
- Entra administrative roles.
- MFA.
- Domain verification.
- User/UPN configuration.
- Group-based licensing.
- PowerShell / Microsoft Graph administration.
- Experience setting up new M365/Entra tenants.
- Understanding of Power Platform and Dynamics 365 tenant prerequisites.
- Ability to translate architecture standards into production configurations.
- Experience creating configuration documentation and implementation evidence.