Role: Senior Microsoft 365 (Office 365) & Cloud Administrator

Team: IT Infrastructure / Cloud Operations

Experience: 812 years total, with at least 5 years administering Microsoft 365 at enterprise scale and at least 3 years administering Azure (AWS exposure is an added advantage)

Employment Type: Full time

Role Summary

We are looking for a Senior Microsoft 365 & Cloud Administrator to manage, secure, and optimise our Microsoft 365 collaboration platform and cloud infrastructure. The incumbent will be responsible for the day-to-day administration, security, compliance, and continuous improvement of Exchange Online, SharePoint, Teams, OneDrive, Entra ID, Intune, Purview, and Defender, along with Azure cloud resources supporting enterprise and business applications.

The role combines hands-on administration with senior ownership, including designing policies, leading migrations and rollouts, managing escalations, automating operations, and ensuring the environment meets security, data protection, and regulatory requirements expected in a pharmaceutical organisation.

Key Responsibilities

1. Microsoft 365 Administration

- Administer and maintain the Microsoft 365 tenant, including tenant settings, service health, Message Center updates, and licensing.
- Manage Exchange Online, including mailbox administration, distribution groups, mail flow, transport rules, connectors, retention policies, journaling, and hybrid Exchange environments.
- Manage SharePoint Online and OneDrive, including site architecture, permissions, sharing policies, storage, lifecycle management, and governance.
- Administer Microsoft Teams, including governance, policies, meeting and calling configurations, guest/external access, and lifecycle management.
- Manage Microsoft 365 Apps deployment, update channels, and add-ins.
- Administer Power Platform environments (Power Apps, Power Automate, Power BI), including DLP policies and governance.
- Govern Microsoft 365 Copilot and AI features, including licensing, data access readiness, oversharing remediation, sensitivity labels, and usage policies.
- Plan and execute tenant, mailbox, and file migrations, including tenant-to-tenant consolidations.

1. Identity and Access Management

- Administer Microsoft Entra ID (Azure AD), including users, groups, dynamic groups, guest users, app registrations, and enterprise applications.
- Manage hybrid identity using Entra Connect/Cloud Sync and on-premises Active Directory.
- Configure and maintain Conditional Access, MFA, passwordless authentication, Self-Service Password Reset (SSPR), and risk-based policies.
- Implement Privileged Identity Management (PIM), role-based access control (RBAC), access reviews,



and identity governance processes.
- Integrate SaaS and enterprise applications using SSO (SAML, OIDC) and SCIM provisioning.

1. Endpoint and Device Management

- Manage device enrolment and administration through Microsoft Intune, including Autopilot, compliance policies, configuration profiles, application deployment, and patch management.
- Administer mobile device and application protection policies (MAM) for BYOD and corporate devices.
- Coordinate with endpoint and security teams on Windows Update for Business and device hardening standards.

1. Security and Threat Protection

- Administer the Microsoft Defender Suite, including Defender for Office 365, Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps.
- Monitor and improve Microsoft Secure Score and Identity Secure Score.
- Investigate and respond to security incidents, including phishing attacks, compromised accounts, and suspicious sign-ins.
- Configure SPF, DKIM, and DMARC to protect against spoofing and impersonation.
- Integrate Microsoft 365 and Azure logs with SIEM solutions such as Microsoft Sentinel or Splunk.

1. Compliance, Data Protection and Governance

- Administer Microsoft Purview, including sensitivity labels, DLP policies, retention policies, records management, eDiscovery, audit logs, and insider risk management.
- Align retention and records management practices with organisational policies and legal hold requirements.
- Support GxP-relevant collaboration use cases in line with 21 CFR Part 11, EU Annex 11, and ALCOA+ principles.
- Support compliance initiatives related to GDPR, India DPDP Act, and internal/external audits.
- Manage Microsoft 365 backup and recovery solutions such as Microsoft 365 Backup, Veeam, AvePoint, or Druva.

1. Cloud Administration (Azure & Multi-Cloud)

- Administer Azure subscriptions and services, including VMs, storage accounts, virtual networks, NSGs, load balancers, App Services, Azure SQL, Key Vault, and backup services.
- Manage Azure resource organisation through management groups, subscriptions, resource groups, tagging, and Azure Policy.
- Implement and maintain RBAC, managed identities, and secure cloud access controls.
- Monitor cloud resources using Azure Monitor, Log Analytics, and alerting mechanisms.
- Manage Azure Backup, Azure Site Recovery,



and disaster recovery testing.
- Support hybrid connectivity through VPN and ExpressRoute integrations.
- Optimise cloud costs using Azure Cost Management and resource rightsizing.
- Support AWS and other cloud platforms where required.

1. Automation and Operations

- Automate administrative tasks using PowerShell, Microsoft Graph API, Azure CLI, Azure Automation, and Logic Apps.
- Utilise Infrastructure as Code (IaC) tools such as Bicep, ARM Templates, or Terraform.
- Maintain SOPs, runbooks, technical documentation, and change records.
- Handle L2/L3 escalations and perform root cause analysis.
- Follow ITIL processes for Incident, Change, Problem, and Service Request Management.
- Monitor Microsoft product roadmaps and assess their organisational impact.

1. Leadership and Collaboration

- Mentor junior administrators and service desk teams.
- Collaborate with security, network, application, QA, and business teams on projects and operational requirements.
- Manage Microsoft partners and vendors for support, licensing, and project delivery.
- Drive user adoption of collaboration technologies and security best practices.

Required Skills & Experience

- Strong hands-on experience administering Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft 365 Admin Center.
- Expertise in Entra ID, Conditional Access, MFA, PIM, and hybrid identity management.
- Hands-on experience with Microsoft Intune and Windows Autopilot.
- Working knowledge of Microsoft Defender and Microsoft Purview.
- Strong Azure administration experience covering compute, storage, networking, RBAC, monitoring, policy management, and backup.
- Expertise in PowerShell scripting and Microsoft Graph.
- Experience managing Microsoft 365 licensing (E3, E5, add-ons) and licence optimisation.
- Experience in tenant migrations, governance, and large-scale enterprise environments with thousands of users.
- Strong understanding of ITIL processes and change management.
- Experience in pharmaceutical, life sciences, or regulated environments is highly preferred.

Preferred Qualifications

- Bachelor's Degree in Computer Science, Information Technology, or a related discipline.

- Microsoft certifications such as
- MS-102: Microsoft 365 Administrator Expert
- AZ-104: Azure Administrator Associate
- SC-300: Identity and Access Administrator
- SC-400 / SC-401: Information Protection Administrator
- MD-102: Endpoint Administrator
- AZ-305: Azure Solutions Architect
- ITIL Foundation Certification.
- Exposure to AWS administration and multi-cloud environments.
- Experience deploying and governing Microsoft 365 Copilot.

📌 Deputy Manager - Senior Microsoft 365 & Cloud Administrator - ITJob ti (Ahmedabad)
🏢 Zydus Lifesciences
📍 Ahmedabad