Lead Engineer, Microsoft 365 and Identity Automation
Flagship Pioneering, Inc.1 day ago
Base Salary
$128k - $176k/yr
Responsibilities
- Build, maintain, troubleshoot, refactor, document, and extend production automation using Microsoft Graph, PowerShell, APIs, Python, and integration platforms.
- Engineer secure and reliable automation with monitoring, logging, error handling, least-privilege authentication, app registrations, service principals, managed identities, certificates, and scoped permissions.
- Automate Exchange Online and SharePoint Online mailboxes, groups, permissions, domains, mail flow, site provisioning, sharing, and lifecycle management.
- Maintain joiner, mover, and leaver processes covering provisioning, groups, licensing, access changes, and deprovisioning across multiple companies and domains.
- Support Entra Lifecycle Workflows, identity governance, dynamic groups, Privileged Identity Management, Conditional Access, B2B identity, single sign-on, and SCIM provisioning.
- Build integrations among HR, ITSM, identity, and collaboration systems using Microsoft Graph, Microsoft capabilities, custom code, Workato, or comparable platforms.
- Apply Git-based source control, peer review, testing, change control, monitoring, CI/CD, runbooks, and support documentation.
- Mentor peers and serve as a senior escalation point for complex Microsoft 365 and identity issues.
Requirements
- 6+ years of experience engineering and supporting Microsoft 365 and Entra ID environments, including 3+ years developing and maintaining production automation with Microsoft Graph.
- Advanced PowerShell experience, including the Microsoft Graph PowerShell SDK and Exchange Online PowerShell, plus working proficiency in another scripting or programming language.
- Experience inheriting, troubleshooting, refactoring, and supporting existing production codebases.
- Hands-on experience with Entra identity lifecycle management, groups and licensing, app registrations, service principals, Conditional Access, PIM, B2B identity, SSO, and SCIM provisioning.
- Experience automating Exchange Online administration and working with SharePoint Online administration or automation.
- Working knowledge of REST APIs, OAuth 2.0, JSON, Git-based workflows, code review, testing, monitoring, and unattended authentication.
- Broad Microsoft 365 operational knowledge, including Entra ID, Exchange Online, Intune, SharePoint, and Teams troubleshooting.
- Strong problem-solving, documentation, communication, and technical leadership skills for working with technical and nontechnical stakeholders.
- Preferred experience with Workato or comparable platforms such as Power Automate, Azure Logic Apps, MuleSoft, or Boomi.
- Preferred experience with Entra ID Governance, HR-driven identity integration, multi-company or multi-domain environments, organizational lifecycle events, Azure Automation, Azure Functions, Key Vault, CI/CD pipelines, infrastructure as code, configuration as code, CoreView, or ShareGate.
- Experience in regulated environments such as life sciences, GxP, or HIPAA is preferred.
- Relevant certifications such as SC-300, MS-102, AZ-104, or AZ-500 are preferred.
Benefits
- Healthcare coverage, an annual incentive program, retirement benefits, and a broad range of other benefits are offered.
About Flagship Pioneering, Inc.
Flagship Pioneering invents, builds, and finances platform biotechnology companies in human health and sustainability, providing founding science, capital, and operational support to entrepreneurs and researchers. The privately held firm, founded in 2000 and headquartered in Cambridge, MA, has originated more than 100 ventures and maintains an ecosystem of 40+ companies. Notable portfolio companies include Moderna, Denali Therapeutics, Generate:Biomedicines, Indigo Agriculture, and Tessera Therapeutics.