IT Platform Owner - Microsoft 365

Graco manufactures and markets premium equipment to move, measure, control, dispense and spray a wide variety of fluid and powder materials. What does that mean? Well, we pump peanut butter into your jar, and the oil in your car. We glue the soles of your shoes, the glass in your windows and the screen on your phone. We spray the finish on your vehicle, coatings on your pills, the paint on your house and texture on your walls. Graco is part of your daily life.

This role is currently based at our Minneapolis office and will transition to our new headquarters in Dayton, MN, in 2027. The Platform Owner – Microsoft 365 is accountable for the strategy, governance, security posture, cost management and operational health of the Microsoft 365 platform across Graco. This position ensures Microsoft 365 services—including Teams, SharePoint Online, OneDrive, Exchange Online, Power Platform and Microsoft 365 Copilot—are secure by default, governed intentionally, financially controlled, scalable, and aligned to Zero Trust and audit requirements. The Platform Owner serves as the decision authority and escalation point for Microsoft 365, setting direction, defining guardrails and ensuring the platform delivers expected business outcomes.

What You Do At Graco

Platform Ownership & Strategic Direction

• Own the end-to-end Microsoft 365 platform roadmap, feature enablement, preview participation, and tenant-wide standards, including integration roadmaps for acquisitions
• Determine when to adopt, defer, restrict or disable new features based on business value, risk, and platform maturity
• Translate platform constraints, risks and tradeoffs into clear guidance for business stakeholders
• Represent Microsoft 365 ownership in governance forums and serve as expert related to platform risk, cost and capability

Governance, Security & Data Controls

• Partner with Cybersecurity and Identity teams to enforce Conditional Access, MFA and least-privilege access
• Own governance for Microsoft 365 services (Teams, SharePoint, OneDrive, Exchange), guest access and external sharing
• Approve exceptions and ensure alignment to Zero Trust principles

Copilot Enablement & Data Usage Governance

• Own Microsoft 365 Copilot enablement, including eligibility, rollout sequencing, licensing approach, cost tracking and risk management
• Translate Copilot behavior and limitations into clear guidance to protect data and reduce oversharing risk
• Define how data is surfaced and used across Microsoft Search and Copilot experiences, balancing usability with protection

Platform Governance, Access & Cost

• Own Microsoft 365 licensing strategy across E, F, Copilot, and Security & Compliance SKUs
• Define request, approval and assignment workflows
• Monitor utilization, drive cost optimization, and develop and manage process to reclaim unused licenses
• Oversee lifecycle governance of third-party apps, app registrations, service principals, and admin consent
• Partners with Cybersecurity to review Graph scopes, mitigate risk, revoke access and conduct periodic access reviews

Operational Oversight & Escalation

• Owns Tier 3 escalation for complex Microsoft 365 incidents
• Coordinates resolution across teams and ensures platform stability and service health
• Drives post-incident remediation and continuous improvement

What You Bring to Graco

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, Engineering or related field
• 7+ years of experience in Microsoft 365 platform ownership, administration, or enterprise collaboration platforms
• Demonstrated ownership of Microsoft 365 (Teams, SharePoint, OneDrive, Exchange) in an enterprise environment, including standards and tenant-level decisions
• Experience leading platform governance and influencing cross-functional partners (Security, Identity, Infrastructure, Compliance)
• Ability to translate platform risk, security posture, and technical constraints into clear business guidance
• Hands-on experience with service management for cloud platforms (incident/problem/change), including Microsoft 365 Service Health, message center impact assessment, and stakeholder communications during outages.
• Working knowledge of access management, security controls (e.g., Conditional Access, MFA), and data protection practices aligned to Zero Trust

Accelerators

• Experience defining and operating Microsoft 365 governance at scale (provisioning, lifecycle, external sharing)
• Familiarity with Microsoft Purview, Defender, and Entra ID governance capabilities
• Experience with structured service management or change control practices in a cloud environment
• Exposure to Power Platform and Microsoft 365 Copilot, including governance and risk considerations
• Strong understanding of licensing models and cost optimization in Microsoft 365

Applicants must be legally authorized to work in the United States. This role is not eligible for immigration sponsorship now or in the future (e.g., H-1B, TN, F-1 OPT). At Graco, you truly make a difference. Your unique talents contribute to our organizational growth and future. Not only do you make a difference, but Graco’s culture empowers employees to create their own career path. Whether you choose to advance within your current department or explore new opportunities in different divisions, you have the ability to build your future. Our managers are here to provide support and guidance as you continue to grow within your career.

Graco has excellent opportunities available to individuals who want to be part of a fast-moving, growing company that is committed to quality, innovation and solving fluid handling problems for our customers. Graco is proud to be named a Best Place to Work by Fortune Magazine in 2016, 2018, 2019, 2021 & 2022. Graco offers attractive compensation, benefits and career development opportunities. Graco’s comprehensive benefits include medical, dental, stock purchase plan, 401(k), tuition reimbursement and more.

Our company uses E-Verify to confirm the employment and eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify.

The base pay range for this position is listed below, exclusive of fringe benefits or other compensation. If you are hired, your final base hourly rate will be determined based on factors such as geographic location, skills, competencies, education, and/or experience. In addition to those factors, we will also consider internal equity of our current employees. Please keep in mind that the range provided is the full base salary range for the role. Hiring at or near the maximum of the range would not be typical to allow for future and continued salary growth.

$98,300.00 - $172,000.00