Associate Principal - Cloud Engineering

Role Description Key Responsibilities

Act as the primary escalation point for complex permissions and access issues involving SharePoint Online Microsoft Teams OneDrive Viva Engage Yammer Microsoft 365 Groups and related M365 services

Investigate and resolve endtoend access challenges including user access external sharing group membership inheritance broken permissions and crosstenant collaboration scenarios

Diagnose issues spanning Microsoft Entra ID Microsoft 365 Groups SharePoint permissions Teams membership and application integrations

Partner with IAM Security Compliance and M365 teams to ensure proper implementation of least privilege separation of duties and governance controls

Lead root cause analysis and remediation of recurring access issues impacting business operations or regulatory compliance

Design and implement scalable permission models ownership structures and governance standards for collaboration platforms

Support mergers acquisitions divestitures and organizational changes requiring complex collaboration and access restructuring

Provide expert guidance on external sharing guest access sensitivity labels information barriers retention policies and compliance requirements

Develop and maintain operational procedures troubleshooting guides standards and knowledge articles for M365 permission management

Serve as a trusted advisor to application owners business stakeholders and IT teams regarding Microsoft 365 collaboration architecture access management and security best practices

Desired Expertise

Deep knowledge of SharePoint Online Microsoft Teams OneDrive Viva Engage Microsoft Entra ID Microsoft 365 Groups and Exchange Online

Strong understanding of identity and access management IAM RBAC Azure ADEntra security groups Conditional Access and Zero Trust principles

Experience operating in large complex global enterprise environments with thousands of users and multiple business units

Ability to analyze and resolve highly complex multiplatform permission and access issues involving multiple Microsoft 365 services