• Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features. • Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role‑based access control. • Own Exchange Online configuration: mail flow, transport rules, connectors, policies, hybrid connectivity (if applicable), and advanced troubleshooting of mail delivery issues. • Use Kusto Query Language (KQL) in tools such as Microsoft 365 Defender, Purview, and Log Analytics to investigate incidents, identify patterns, and develop detection queries and reports. • Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment. • Develop and maintain automation, scripts, and integrations using PowerShell and Microsoft Graph API to streamline administration, reporting, and provisioning. • Contribute to CI/CD and infrastructure‑as‑code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads. • Work with containerized and cloud workloads (e.g., Kubernetes) where they integrate with M365/Entra for identity, security, or application access. • Lead complex incident response and root‑cause analysis for M365 and identity‑related outages or security events. • Produce and maintain technical documentation, standards, runbooks, and architectural diagrams for Microsoft 365 and Entra services. • Mentor junior administrators and provide guidance on best practices, governance, and operational excellence.