About Us:
Imagen Dental Partners is a community of the best players in the game. We surround the industry’s top dental experts with deep business expertise, resulting in the highest performing practices in the nation. We are the home for the exceptional, technology driven dentist. We strive for excellence in all that we do, supporting high achievers who embrace innovation. Founded by highly experienced industry experts we are expanding our footprint at tremendous speed. As a fast-growing startup, we look for people hungry for growth, who get things done, and are energized by a high-intensity environment.
We’re building a culture at Imagen where ‘A’ players can do their best work. Developing powerful leaders and world class culture that generate revolutionary results. That’s why our top priority is creating an environment in which talented people excel, collaborate, and do the most influential work of their careers. We value new ideas, fresh perspectives, and unique voices. Every. Day. We lead. We forge our own path in the marketplace. No one’s been where we’re going. And that’s just how we like it. We strive to make the lives of everyone associated with our partner practices better. To bring a smile to every face. We create community — and inspire that community to become a movement.
We are pioneering our own path to become Dentistry’s top player.
We trust amazing people to do amazing things.
Let’s grow together.
The Systems Engineer Lead – M365 & Entra is responsible for leading Imagen’s modern workspace architecture, operations, and lifecycle management of Microsoft 365 services, Microsoft Entra ID (formerly Azure Active Directory), and associated platforms. This role encompasses production support, security governance, configuration management, proactive monitoring, incident response, escalation management, and continuous service improvement for M365, Teams, SharePoint, Exchange Online, Intune, and Entra.
The ideal candidate demonstrates exceptional collaboration skills with both internal teams and external partners, excellent written and verbal communication abilities, technical leadership, and a strong bias for proactive problem solving and reduction of technical debt.

Responsibilities:

• Microsoft 365 Management: Administer, govern, and optimize Microsoft 365 tenants, including Entra, Exchange Online, Teams, SharePoint Online, OneDrive for Business, and related applications.
• Identity and Access Management: Design, implement, and maintain Microsoft Entra ID solutions, including user and device identity management, authentication mechanisms (SSO and MFA), access governance, and secure hybrid integrations.
• Conditional Access Management: Develop, implement, and continuously monitor Conditional Access policies to enhance security posture across cloud and hybrid environments.
• Integration Management: Integrate Entra ID with enterprise systems, SaaS platforms, and third-party applications to streamline identity lifecycle and application access management.
• Troubleshooting and Escalation Support: Act as Tier 2/3 escalation point for complex identity, access, and platform issues; drive root cause analysis and implement long-term remediation strategies.
• Security Compliance and Best Practices: Implement and enforce security best practices across Microsoft 365, Intune, and Entra environments; ensure alignment with regulatory and compliance frameworks (SOX, FDIC, Internal Audit).
• Endpoint Management: Architect, configure, and manage Microsoft Intune environments for modern device management, including deployment of Intune policies, application delivery, and mobile device lifecycle management.
• Windows Baseline Management: Develop and maintain standardized Windows 10/11 baselines for enterprise endpoints through Intune and configuration management.
• Governance and Automation: Establish governance standards, automate operational processes, and contribute to policy development to ensure efficient, secure, and sustainable service operations.
• Manage, configure, and maintain Exchange Online environments, including mailbox databases, user mailboxes, shared mailboxes, distribution groups, and resource mailboxes.
• Administer Exchange Online policies, such as mailbox retention, litigation hold, mailbox auditing, and email retention policies.
• Configure transport rules (mail flow rules), connectors, accepted domains, and address book policies.
• Platform Strategy and Optimization: Lead initiatives to enhance platform efficiency, adoption, user experience, reporting capabilities, and application performance tuning.
• Audit Support: Provide accurate, timely documentation and responses for internal, external, and regulatory audit requirements.
• Continuous Improvement: Recommend and drive improvements to security controls, configurations, and operational processes to optimize service delivery and risk mitigation.
• Other duties as assigned.

PREFERRED SKILLS:

• Strong scripting or automation skills (PowerShell preferred) for M365, Intune, and Azure administration.
• Experience with Microsoft Security and Compliance Center.
• Strong project management and documentation skills.
• Ability to work independently with minimal oversight while driving initiatives to completion.
• High emotional intelligence (EQ) to collaborate across technical and non-technical teams.

Qualifications:

• 5–10 years of progressive experience supporting and managing Microsoft 365 services, Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Entra ID (formerly Azure AD), and Microsoft Intune.
• Strong hands-on experience with:
• Device and application management (Intune)
• Conditional Access
• Single Sign-On (SSO) and Multi-Factor Authentication (MFA) configurations
• Hybrid identity solutions (Azure AD Connect, Pass-through Authentication, Federation)
• IT governance, SOX, FDIC, and general audit compliance support
• Practical knowledge of ITIL v4 principles related to service management and incident/problem/change processes.
• Bachelor’s Degree in a related field:
• Computer Science
• Information Technology
• Computer or Network Engineering
• Management Information Systems (MIS)
• Cybersecurity
• Telecommunications
• Preferred Certifications:
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Modern Desktop Administrator Associate (MD-102)
• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)
• Microsoft Certified: Security Administrator Associate (SC-200)
• CompTIA Security+ or CISSP

Note: Equivalent practical experience may substitute for formal education requirements if combined with relevant certifications and demonstrated expertise.

• Microsoft 365 Management: Administer, govern, and optimize Microsoft 365 tenants, including Entra, Exchange Online, Teams, SharePoint Online, OneDrive for Business, and related applications.
• Identity and Access Management: Design, implement, and maintain Microsoft Entra ID solutions, including user and device identity management, authentication mechanisms (SSO and MFA), access governance, and secure hybrid integrations.
• Conditional Access Management: Develop, implement, and continuously monitor Conditional Access policies to enhance security posture across cloud and hybrid environments.
• Integration Management: Integrate Entra ID with enterprise systems, SaaS platforms, and third-party applications to streamline identity lifecycle and application access management.
• Troubleshooting and Escalation Support: Act as Tier 2/3 escalation point for complex identity, access, and platform issues; drive root cause analysis and implement long-term remediation strategies.
• Security Compliance and Best Practices: Implement and enforce security best practices across Microsoft 365, Intune, and Entra environments; ensure alignment with regulatory and compliance frameworks (SOX, FDIC, Internal Audit).
• Endpoint Management: Architect, configure, and manage Microsoft Intune environments for modern device management, including deployment of Intune policies, application delivery, and mobile device lifecycle management.
• Windows Baseline Management: Develop and maintain standardized Windows 10/11 baselines for enterprise endpoints through Intune and configuration management.
• Governance and Automation: Establish governance standards, automate operational processes, and contribute to policy development to ensure efficient, secure, and sustainable service operations.
• Manage, configure, and maintain Exchange Online environments, including mailbox databases, user mailboxes, shared mailboxes, distribution groups, and resource mailboxes.
• Administer Exchange Online policies, such as mailbox retention, litigation hold, mailbox auditing, and email retention policies.
• Configure transport rules (mail flow rules), connectors, accepted domains, and address book policies.
• Platform Strategy and Optimization: Lead initiatives to enhance platform efficiency, adoption, user experience, reporting capabilities, and application performance tuning.
• Audit Support: Provide accurate, timely documentation and responses for internal, external, and regulatory audit requirements.
• Continuous Improvement: Recommend and drive improvements to security controls, configurations, and operational processes to optimize service delivery and risk mitigation.
• Other duties as assigned