Microsoft 365 Administrator (Exchange)

Location:

The M365 Administrator position is a senior administration role on the End User Technology Cloud Platforms team, responsible for the architecture, automation, governance, administration, and continuous improvement of the enterprise Microsoft 365 platform. This role requires strong expertise in Microsoft Entra ID, Exchange Online, PowerShell automation, and Microsoft Graph, with the ability to lead platform modernization, streamline operations, and ensure secure, reliable, and compliant cloud services. 

Primary Responsibilities 

Automation, Engineering & Platform Leadership (25%) 

• Design, develop, and maintain automation solutions using PowerShell, Microsoft Graph, Azure Automation, Logic Apps, REST APIs, and enterprise integration technologies. 

• Implement automated provisioning, lifecycle management, and governance for identities, mailboxes, groups, collaboration resources, and access workflows. 

• Develop dashboards, monitoring, reporting, runbooks, engineering standards, and technical documentation to improve operational effectiveness. 

• Lead platform modernization, continuous improvement, root cause analysis, long-term corrective actions, mentoring, escalation support, and Microsoft 365 roadmap planning. 

Entra ID & Identity Management (25%) 

• Administer Microsoft Entra ID, including user lifecycle management, groups, RBAC, administrative roles, Conditional Access, MFA, authentication methods, SSPR, Identity Protection, and Identity Governance. 

• Support PIM, Access Reviews, Entitlement Management, Lifecycle Workflows, B2B/guest user management, hybrid identity, and directory synchronization. 

• Integrate enterprise applications using SAML, OAuth, OpenID Connect, and SCIM while developing governance standards and access controls for security and regulatory needs. 

Exchange Online & Messaging Services (25%) 

• Administer Exchange Online services, including user/shared/resource mailboxes, distribution groups, dynamic groups, contacts, mail flow, transport configuration, permissions, and access concerns. 

• Manage Exchange Online Protection, Defender for Office 365, anti-spam/phishing policies, transport rules, message hygiene, SPF, DKIM, DMARC, SMTP relay, and mail routing architecture. 

• Troubleshoot mail delivery, authentication, connectivity, Outlook client issues, and support messaging compliance, retention policies, Litigation Hold, mailbox auditing, eDiscovery, tenant migrations, integrations, and reporting automation. 

Security, Compliance & Governance (15%) 

• Administer Microsoft Purview and related compliance services, including DLP, Information Protection, sensitivity labels, retention, records management, and compliance policies. 

• Monitor and improve Microsoft Secure Score and Identity Secure Score while supporting audit, legal, regulatory, cybersecurity, risk, and compliance initiatives. 

Collaboration & Productivity Services (10%) 

• Administer Microsoft Teams, SharePoint Online, OneDrive, Microsoft 365 Groups, collaboration policies, external sharing, guest access, site governance, and Teams governance standards. 

• Partner with business stakeholders to enable secure collaboration and support adoption of Microsoft Copilot and emerging Microsoft 365 productivity technologies. 

Required Experience 

Required experience should align closely to the role priorities: 

• 5+ years of Microsoft 365 administration experience in a medium-to-large enterprise environment. 

• Hands-on administration experience supporting both Microsoft Entra ID and Exchange Online. 

• Strong PowerShell scripting, automation, Microsoft Graph, provisioning, governance, and lifecycle management experience. 

• Experience administering Teams, SharePoint Online, OneDrive, Microsoft 365 security, compliance, and governance technologies. 

• Experience supporting regulated enterprise environments, leading technical initiatives, and guiding teams across Microsoft 365 services preferred. 

Core Competencies

• All KeyBank employees are expected to demonstrate Key’s Values and abide by Key’s Code of Conduct.

Work Location Category

• Hybrid (2+ days)

COMPENSATION AND BENEFITS

Please click here for a list of benefits for which this position is eligible.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.